CVE-2005-3675

Published Nov 18, 2005

Last updated a day ago

Overview

Description: The Transmission Control Protocol (TCP) allows remote attackers to cause a denial of service (bandwidth consumption) by sending ACK messages for packets that have not yet been received (optimistic ACKs), which can cause the sender to increase its transmission rate until it fills available bandwidth.
Source: cve@mitre.org
NVD status: Deferred

Risk scores

CVSS 2.0

Type: Primary
Base score: 7.8
Impact score: 6.9
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:N/I:N/A:C

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:tcp:tcp:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A2E69CF1-D657-4511-8726-D122211B9002"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References