NVD

Id
71215  
Name
CVE-2004-0791  
Description
Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via a blind throughput-reduction attack using spoofed Source Quench packets, aka the "ICMP Source Quench attack." NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2016-12-20  
Published
2005-04-12  
Modified Date
2016-10-17  
Seq
2004-0791  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
367850 71215 CVE-2004-0791 SCOSA-2006.4  View
367851 71215 CVE-2004-0791 SSRT4884  View
367852 71215 CVE-2004-0791 oval:org.mitre.oval:def:10228  View
367853 71215 CVE-2004-0791 oval:org.mitre.oval:def:1112  View
367854 71215 CVE-2004-0791 oval:org.mitre.oval:def:184  View
367855 71215 CVE-2004-0791 oval:org.mitre.oval:def:464  View
367856 71215 CVE-2004-0791 oval:org.mitre.oval:def:596  View
367857 71215 CVE-2004-0791 oval:org.mitre.oval:def:688  View
367858 71215 CVE-2004-0791 oval:org.mitre.oval:def:726  View
367859 71215 CVE-2004-0791 19  View
367860 71215 CVE-2004-0791 57  View
367861 71215 CVE-2004-0791 101658  View
367862 71215 CVE-2004-0791 57746  View
367863 71215 CVE-2004-0791 http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html  View
367864 71215 CVE-2004-0791 RHSA-2005:016  View
367865 71215 CVE-2004-0791 RHSA-2005:017  View
367866 71215 CVE-2004-0791 RHSA-2005:043  View
367867 71215 CVE-2004-0791 HPSBUX01164  View
367868 71215 CVE-2004-0791 FLSA:157459-1  View
367869 71215 CVE-2004-0791 FLSA:157459-2  View
367870 71215 CVE-2004-0791 13124  View
367871 71215 CVE-2004-0791 http://www.uniras.gov.uk/niscc/docs/al-20050412-00308.html?lang=en  View
367872 71215 CVE-2004-0791 http://www.watersprings.org/pub/id/draft-gont-tcpm-icmp-attacks-03.txt  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62042 JVNDB-2005-000244 TCP 実装における ICMP Source Quench メッセージ処理によるサービス運用妨害 (DoS) の脆弱性 複数のベンダ製品における TCP の実装には、ICMP エラーメッセージに含まれる IP アドレスと TCP ポートの妥当性だけが検証され、シーケンス番号が適切な範囲内にあるかチェックしない不備が存在します。これにより、ICMP source quench エラーメッセージの処理により、確立されている TCP コネクションのスループットが低下してしまう脆弱性が存在します。 CVE-2004-0791 9218 CVE-2004-0791 71215 5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000244.html 2005-04-12 2007-04-01 View