CVE Feed

    Dashboard / CVE / CVE-2005-3774

    CVE-2005-3774

    Cisco PIX 6.3 and 7.0 allows remote attackers to cause a denial of service (blocked new connections) via spoofed TCP packets that cause the PIX to create embryonic connections that that would not produce a valid connection with the end system, including (1) SYN packets with invalid checksums, which do not result in a RST; or, from an external interface, (2) one byte of "meaningless data," or (3) a TTL that is one less than needed to reach the internal destination.

    Published:Nov 23, 2005
    Last Modified:Apr 16, 2026
    EPS:Nov 23, 2005
    EPSS Score:0.35143
    CVSS Score:5

    Affected Products

    Vendor
    Cisco
    Product
    Pix

    Exploits

    https://www.exploit-db.com/exploits/1338https://www.exploit-db.com/exploits/26548

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2009-1160 (CVSS 4.3) — Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0(8)1, 7.1 befor…
    CVE-2009-1155 (CVSS 7.8) — Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.1(1) through 7.1(2)82, 7.2 …
    CVE-2009-1158 (CVSS 7.8) — Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series devices 7.0 before 7.0(8)6, …
    CVE-2009-1157 (CVSS 7.8) — Memory leak on Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0…
    CVE-2009-1159 (CVSS 7.8) — Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances …
    CVE-2009-1156 (CVSS 5.7) — Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series devices 8.0 before 8.0(4)25 …
    CVE-2008-3815 (CVSS 4.3) — Unspecified vulnerability in Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances …
    CVE-2008-2733 (CVSS 7.1) — Cisco PIX and Adaptive Security Appliance (ASA) 5500 devices 7.2 before 7.2(4)2, 8.0 before 8.0(3)14, and 8.1 …
    CVE-2008-2732 (CVSS 7.8) — Multiple unspecified vulnerabilities in the SIP inspection functionality in Cisco PIX and Adaptive Security Ap…
    CVE-2007-2464 (CVSS 7.1) — Race condition in Cisco Adaptive Security Appliance (ASA) and PIX 7.1 before 7.1(2)49 and 7.2 before 7.2(2)19,…

    References

    http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/038971.html
    http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/038983.html
    http://secunia.com/advisories/17670
    http://securitytracker.com/id?1015256
    http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_security_notice09186a0080624a37.html
    http://www.cisco.com/warp/public/707/cisco-response-20051122-pix.shtml
    http://www.kb.cert.org/vuls/id/853540
    http://www.osvdb.org/24140
    http://www.securityfocus.com/archive/1/417458/30/0/threaded
    http://www.securityfocus.com/archive/1/426989/100/0/threaded
    http://www.securityfocus.com/archive/1/426991/100/0/threaded
    http://www.securityfocus.com/archive/1/427041/100/0/threaded
    http://www.securityfocus.com/bid/15525
    http://www.vupen.com/english/advisories/2005/2546
    https://exchange.xforce.ibmcloud.com/vulnerabilities/25077
    https://exchange.xforce.ibmcloud.com/vulnerabilities/25079
    http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/038971.html
    http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/038983.html
    http://secunia.com/advisories/17670
    http://securitytracker.com/id?1015256
    http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_security_notice09186a0080624a37.html
    http://www.cisco.com/warp/public/707/cisco-response-20051122-pix.shtml
    http://www.kb.cert.org/vuls/id/853540
    http://www.osvdb.org/24140
    http://www.securityfocus.com/archive/1/417458/30/0/threaded
    http://www.securityfocus.com/archive/1/426989/100/0/threaded
    http://www.securityfocus.com/archive/1/426991/100/0/threaded
    http://www.securityfocus.com/archive/1/427041/100/0/threaded
    http://www.securityfocus.com/bid/15525
    http://www.vupen.com/english/advisories/2005/2546
    https://exchange.xforce.ibmcloud.com/vulnerabilities/25077
    https://exchange.xforce.ibmcloud.com/vulnerabilities/25079

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High