NVD

Id
71452  
Name
CVE-2004-1060  
Description
Multiple TCP/IP and ICMP implementations, when using Path MTU (PMTU) discovery (PMTUD), allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via forged ICMP ("Fragmentation Needed and Don"t Fragment was Set") packets with a low next-hop MTU value, aka the "Path MTU discovery attack." NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2016-12-20  
Published
2004-04-12  
Modified Date
2016-10-17  
Seq
2004-1060  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
369500 71452 CVE-2004-1060 SCOSA-2006.4  View
369501 71452 CVE-2004-1060 SSRT4884  View
369502 71452 CVE-2004-1060 oval:org.mitre.oval:def:181  View
369503 71452 CVE-2004-1060 oval:org.mitre.oval:def:196  View
369504 71452 CVE-2004-1060 oval:org.mitre.oval:def:2188  View
369505 71452 CVE-2004-1060 oval:org.mitre.oval:def:3826  View
369506 71452 CVE-2004-1060 oval:org.mitre.oval:def:405  View
369507 71452 CVE-2004-1060 oval:org.mitre.oval:def:5386  View
369508 71452 CVE-2004-1060 oval:org.mitre.oval:def:651  View
369509 71452 CVE-2004-1060 oval:org.mitre.oval:def:780  View
369510 71452 CVE-2004-1060 oval:org.mitre.oval:def:899  View
369511 71452 CVE-2004-1060 19  View
369512 71452 CVE-2004-1060 57  View
369513 71452 CVE-2004-1060 20050412 Crafted ICMP Messages Can Cause Denial of Service  View
369514 71452 CVE-2004-1060 http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html  View
369515 71452 CVE-2004-1060 MS05-019  View
369516 71452 CVE-2004-1060 HPSBUX01164  View
369517 71452 CVE-2004-1060 13124  View
369518 71452 CVE-2004-1060 http://www.uniras.gov.uk/niscc/docs/al-20050412-00308.html?lang=en  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62057 JVNDB-2005-000259 TCP 実装おける Path MTU Discovery (PMTUD) によるサービス運用妨害 (DoS) の脆弱性 多くの OS に実装されている Path MTU Discovery (PMTUD)では、IP ヘッダ中の分割禁止フラグがセットされるため、この問題を悪用した ICMP メッセージを受信すると、システムのネットワークパフォーマンスが著しく低下する脆弱性が存在します。 CVE-2004-1060 9487 CVE-2004-1060 71452 5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000259.html 2005-04-13 2007-04-01 View