Denial of Service Vulnerability in Multiple TCP Implementations by Various Vendors

CVE-2005-0356

Summary

Multiple TCP implementations with the Protection Against Wrapped Sequence Numbers (PAWS) feature enabled have a vulnerability that allows remote attackers to execute a denial of service attack. By sending a spoofed packet containing a large timestamp value, an attacker can trick the target system into dropping legitimate packets, perceiving them as outdated. This can result in connection loss, severely disrupting network services and stability.

References