ID CVE-2005-0067
Summary The original design of TCP does not require that port numbers be assigned randomly (aka "Port randomization"), which makes it easier for attackers to forge ICMP error messages for specific TCP connections and cause a denial of service, as demonstrated using (1) blind connection-reset attacks with forged "Destination Unreachable" messages, (2) blind throughput-reduction attacks with forged "Source Quench" messages, or (3) blind throughput-reduction attacks with forged ICMP messages that cause the Path MTU to be reduced. NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.
References
Vulnerable Configurations
  • cpe:2.3:a:tcp:tcp:*:*:*:*:*:*:*:*
    cpe:2.3:a:tcp:tcp:*:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 05-09-2008 - 20:45)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
refmap via4
bid 13124
misc http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html
Last major update 05-09-2008 - 20:45
Published 22-12-2004 - 05:00
Last modified 05-09-2008 - 20:45
Back to Top