← All CVEs

CVE-2005-0356

medium · 5

Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard later packets because they appear to be too old.

5
CVSS
82.8%
EPSS (exploit prob.)
100th
EPSS percentile
2005-05-31
Published

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

VendorProductAffected versions
ciscoagent_desktopall versions
ciscoe-mail_managerall versions
ciscoemergency_responder1.1
ciscointelligent_contact_manager5.0
ciscointeractive_voice_responseall versions
ciscoip_contact_center_enterpriseall versions
ciscoip_contact_center_expressall versions
ciscomeetingplaceall versions
ciscopersonal_assistant1.3(1)
ciscopersonal_assistant1.3(2)
ciscopersonal_assistant1.3(3)
ciscopersonal_assistant1.3(4)
ciscopersonal_assistant1.4(1)
ciscopersonal_assistant1.4(2)
ciscoremote_monitoring_suite_optionall versions
ciscosecure_access_control_server2.0
ciscosecure_access_control_server2.1
ciscosecure_access_control_server2.3
ciscosecure_access_control_server2.3
ciscosecure_access_control_server2.3.5.1
ciscosecure_access_control_server2.3.6.1
ciscosecure_access_control_server2.4
ciscosecure_access_control_server2.5
ciscosecure_access_control_server2.6
ciscosecure_access_control_server2.6.2
ciscosecure_access_control_server2.6.3
ciscosecure_access_control_server2.6.4
ciscosecure_access_control_server2.42
ciscosecure_access_control_server3.0
ciscosecure_access_control_server3.0
ciscosecure_access_control_server3.0.1
ciscosecure_access_control_server3.0.3
ciscosecure_access_control_server3.1
ciscosecure_access_control_server3.1.1
ciscosecure_access_control_server3.2
ciscosecure_access_control_server3.2
ciscosecure_access_control_server3.2(1)
ciscosecure_access_control_server3.2(1.20)
ciscosecure_access_control_server3.2(2)
ciscosecure_access_control_server3.2(3)

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2005-0356