OSVDB ID: 14578

Title: Microsoft Windows Malformed TCP SYN Loopback Packet Remote DoS (land)

Info

Disclosure

Mar 05, 2005

Discovery

Feb 25, 2005

Dates

Exploit

Mar 05, 2005

Solution

Unknown

Description

Microsoft Windows contains a flaw that may allow a remote denial of service. The issue is triggered when sending a TCP packet with the SYN flag set and the same destination and source address and port, which causes the system to consume all available CPU resources, resulting in a loss of availability.

Classification

Location: Remote / Network Access
Attack Type: Denial of Service
Impact: Loss of Availability
Exploit: Exploit Public
Disclosure: OSVDB Verified

Solution

Currently, there are no known workarounds or upgrades to correct this issue. However, Microsoft has released a patch to address this vulnerability.

Products

Microsoft Corporation

Windows

XP SP2
XP x64 Version 2003
ME
98 SE
2003 Server
2000 SP3
98
XP SP1
2000 SP4
XP SP1 x64

References

Credit

  • Dejan Levaja - dejanlevaja.com -


Direct URL: http://osvdb.org/14578