CVE Feed

    Dashboard / CVE / CVE-2005-0356

    CVE-2005-0356

    Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard later packets because they appear to be too old.

    Published:May 31, 2005
    Last Modified:Apr 16, 2026
    EPS:May 31, 2005
    EPSS Score:0.81532
    CVSS Score:5

    Affected Products

    Vendor
    Alaxala
    Product
    Alaxala Networks
    Vendor
    Cisco
    Product
    Agent Desktop
    Vendor
    Cisco
    Product
    Aironet Ap1200
    Vendor
    Cisco
    Product
    Aironet Ap350
    Vendor
    Cisco
    Product
    Call Manager
    Vendor
    Cisco
    Product
    Ciscoworks 1105 Hosting Solution Engine
    Vendor
    Cisco
    Product
    Ciscoworks 1105 Wireless Lan Solution Engine
    Vendor
    Cisco
    Product
    Ciscoworks Access Control List Manager
    Vendor
    Cisco
    Product
    Ciscoworks Cd1
    Vendor
    Cisco
    Product
    Ciscoworks Common Management Foundation
    Vendor
    Cisco
    Product
    Ciscoworks Common Services
    Vendor
    Cisco
    Product
    Ciscoworks Lms
    Vendor
    Cisco
    Product
    Ciscoworks Vpn Security Management Solution
    Vendor
    Cisco
    Product
    Ciscoworks Windows
    Vendor
    Cisco
    Product
    Ciscoworks Windows Wug
    Vendor
    Cisco
    Product
    Conference Connection
    Vendor
    Cisco
    Product
    Content Services Switch 11000
    Vendor
    Cisco
    Product
    Content Services Switch 11050
    Vendor
    Cisco
    Product
    Content Services Switch 11150
    Vendor
    Cisco
    Product
    Content Services Switch 11500
    Vendor
    Cisco
    Product
    Content Services Switch 11501
    Vendor
    Cisco
    Product
    Content Services Switch 11503
    Vendor
    Cisco
    Product
    Content Services Switch 11506
    Vendor
    Cisco
    Product
    Content Services Switch 11800
    Vendor
    Cisco
    Product
    E-mail Manager
    Vendor
    Cisco
    Product
    Emergency Responder
    Vendor
    Cisco
    Product
    Intelligent Contact Manager
    Vendor
    Cisco
    Product
    Interactive Voice Response
    Vendor
    Cisco
    Product
    Ip Contact Center Enterprise
    Vendor
    Cisco
    Product
    Ip Contact Center Express
    Vendor
    Cisco
    Product
    Meetingplace
    Vendor
    Cisco
    Product
    Mgx 8230
    Vendor
    Cisco
    Product
    Mgx 8250
    Vendor
    Cisco
    Product
    Personal Assistant
    Vendor
    Cisco
    Product
    Remote Monitoring Suite Option
    Vendor
    Cisco
    Product
    Secure Access Control Server
    Vendor
    Cisco
    Product
    Sn 5420 Storage Router
    Vendor
    Cisco
    Product
    Sn 5420 Storage Router Firmware
    Vendor
    Cisco
    Product
    Sn 5428 Storage Router
    Vendor
    Cisco
    Product
    Support Tools
    Vendor
    Cisco
    Product
    Unity Server
    Vendor
    Cisco
    Product
    Web Collaboration Option
    Vendor
    Cisco
    Product
    Webns
    Vendor
    F5
    Product
    Tmos
    Vendor
    Freebsd
    Product
    Freebsd
    Vendor
    Hitachi
    Product
    Alaxala
    Vendor
    Hitachi
    Product
    Gr3000
    Vendor
    Hitachi
    Product
    Gr4000
    Vendor
    Hitachi
    Product
    Gs4000
    Vendor
    Microsoft
    Product
    Windows 2000
    Vendor
    Microsoft
    Product
    Windows 2003 Server
    Vendor
    Microsoft
    Product
    Windows Xp
    Vendor
    Nortel
    Product
    7220 Wlan Access Point
    Vendor
    Nortel
    Product
    7250 Wlan Access Point
    Vendor
    Nortel
    Product
    Business Communications Manager
    Vendor
    Nortel
    Product
    Callpilot
    Vendor
    Nortel
    Product
    Contact Center
    Vendor
    Nortel
    Product
    Ethernet Routing Switch 1612
    Vendor
    Nortel
    Product
    Ethernet Routing Switch 1624
    Vendor
    Nortel
    Product
    Ethernet Routing Switch 1648
    Vendor
    Nortel
    Product
    Optical Metro 5000
    Vendor
    Nortel
    Product
    Optical Metro 5100
    Vendor
    Nortel
    Product
    Optical Metro 5200
    Vendor
    Nortel
    Product
    Succession Communication Server 1000
    Vendor
    Nortel
    Product
    Survivable Remote Gateway
    Vendor
    Nortel
    Product
    Universal Signaling Point
    Vendor
    Openbsd
    Product
    Openbsd
    Vendor
    Yamaha
    Product
    Rt105
    Vendor
    Yamaha
    Product
    Rt250i
    Vendor
    Yamaha
    Product
    Rt300i
    Vendor
    Yamaha
    Product
    Rt57i
    Vendor
    Yamaha
    Product
    Rtv700
    Vendor
    Yamaha
    Product
    Rtx1000
    Vendor
    Yamaha
    Product
    Rtx1100
    Vendor
    Yamaha
    Product
    Rtx1500
    Vendor
    Yamaha
    Product
    Rtx2000

    Exploits

    http://www.securityfocus.com/bid/13676http://www.securityfocus.com/bid/13676https://www.exploit-db.com/exploits/1008

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    References

    ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:15.tcp.asc
    ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.64/SCOSA-2005.64.txt
    http://secunia.com/advisories/15393
    http://secunia.com/advisories/15417/
    http://secunia.com/advisories/18222
    http://secunia.com/advisories/18662
    http://support.avaya.com/elmodocs2/security/ASA-2006-032.htm
    http://www.cisco.com/warp/public/707/cisco-sn-20050518-tcpts.shtml
    http://www.kb.cert.org/vuls/id/637934
    http://www.securityfocus.com/bid/13676
    https://exchange.xforce.ibmcloud.com/vulnerabilities/20635
    ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:15.tcp.asc
    ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.64/SCOSA-2005.64.txt
    http://secunia.com/advisories/15393
    http://secunia.com/advisories/15417/
    http://secunia.com/advisories/18222
    http://secunia.com/advisories/18662
    http://support.avaya.com/elmodocs2/security/ASA-2006-032.htm
    http://www.cisco.com/warp/public/707/cisco-sn-20050518-tcpts.shtml
    http://www.kb.cert.org/vuls/id/637934
    http://www.securityfocus.com/bid/13676
    https://exchange.xforce.ibmcloud.com/vulnerabilities/20635

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High