NVD

Id
69412  
Name
CVE-2005-3774  
Description
Cisco PIX 6.3 and 7.0 allows remote attackers to cause a denial of service (blocked new connections) via spoofed TCP packets that cause the PIX to create embryonic connections that that would not produce a valid connection with the end system, including (1) SYN packets with invalid checksums, which do not result in a RST; or, from an external interface, (2) one byte of "meaningless data," or (3) a TTL that is one less than needed to reach the internal destination.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-07-18  
Published
2005-11-22  
Modified Date
2017-07-10  
Seq
2005-3774  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
358880 69412 CVE-2005-3774 20051122 Cisco PIX TCP Connection Prevention  View
358881 69412 CVE-2005-3774 20051122 Cisco PIX TCP Connection Prevention  View
358882 69412 CVE-2005-3774 1015256  View
358883 69412 CVE-2005-3774 http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_security_notice09186a0080624a37.html  View
358884 69412 CVE-2005-3774 20051128 Response to Cisco PIX TCP Connection Prevention  View
358885 69412 CVE-2005-3774 VU#853540  View
358886 69412 CVE-2005-3774 20051122 Cisco PIX TCP Connection Prevention  View
358887 69412 CVE-2005-3774 20060307 Cisco PIX embryonic state machine 1b data DoS  View
358888 69412 CVE-2005-3774 20060307 Cisco PIX embryonic state machine TTL(n-1) DoS  View
358889 69412 CVE-2005-3774 20060307 RE: Cisco PIX embryonic state machine 1b data DoS  View
358890 69412 CVE-2005-3774 15525  View
358891 69412 CVE-2005-3774 ADV-2005-2546  View
358892 69412 CVE-2005-3774 cisco-pix-tcp-data-field-dos(25077)  View
358893 69412 CVE-2005-3774 cisco-pix-ttl-dos(25079)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62494 JVNDB-2005-000696 Cisco PIX Firewall における偽装した SYN パケットによるサービス運用妨害 (DoＳ) の脆弱性 Cisco PIX Firewall には、不正な TCP SYN パケットを処理した際に、その後一定時間、そのパケットと送信元および送信先情報 (IP アドレスおよびポート) が一致するパケットを拒否する機能があり、不正なパケットの送信元情報を正当なホストのものに偽装された場合、正当なホストからの通信が妨害される脆弱性が存在します。 CVE-2005-3774 14976 CVE-2005-3774 69412 7.8 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000696.html 2005-11-22 2007-04-01 View