Multiple Vendor TCP Sequence Number Approximation Vulnerability
BID:10183
CVE-2004-230 |Info
Multiple Vendor TCP Sequence Number Approximation Vulnerability
| Bugtraq ID: | 10183 |
| Class: | Design Error |
| CVE: |
CVE-2004-0230 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 20 2004 12:00AM |
| Updated: | Aug 12 2015 10:24PM |
| Credit: | Discovery is credited to Paul A. Watson. |
| Vulnerable: |
Symantec VelociRaptor 1300 1.5 Symantec VelociRaptor 1200 1.5 Symantec VelociRaptor 1100 1.5 Symantec Nexland Pro800turbo Firewall Appliance Symantec Nexland Pro800 Firewall Appliance Symantec Nexland Pro400 Firewall Appliance Symantec Nexland Pro100 Firewall Appliance Symantec Nexland ISB SOHO Firewall Appliance Symantec Gateway Security 5400 2.0.1 Symantec Gateway Security 5400 2.0 Symantec Gateway Security 5310 1.0 Symantec Gateway Security 5300 1.0 Symantec Gateway Security 460R Symantec Gateway Security 460 Symantec Gateway Security 440 Symantec Gateway Security 420 0 Symantec Gateway Security 360R 2.1 Build 415 Symantec Gateway Security 360R 2.1 Build 300 Symantec Gateway Security 360R Symantec Gateway Security 360 Symantec Gateway Security 320 Symantec Firewall/VPN Appliance 200R Symantec Firewall/VPN Appliance 200 Symantec Firewall/VPN Appliance 100 Symantec Enterprise Firewall 8.0 Solaris Symantec Enterprise Firewall 8.0 NT/2000 Symantec Enterprise Firewall 7.0.4 Solaris Symantec Enterprise Firewall 7.0.4 NT/2000 Symantec Enterprise Firewall 7.0 Solaris Symantec Enterprise Firewall 7.0 NT/2000 SGI IRIX 6.5.25 SGI IRIX 6.5.24 SGI IRIX 6.5.23 SGI IRIX 6.5.22 SEIL Turbo 1.18 SEIL neu T1 ("Ver.2" series) 2.21 SEIL neu T1 ("Ver.1" series) 1.89 SEIL neu ATM 1.35 SEIL neu 2FE Plus 1.9 SEIL neu 2FE ("Ver.2" series) 2.21 SEIL neu 2FE ("Ver.1" series) 1.89 SEIL neu 128 ("Ver.2" series) 2.21 SEIL neu 128 ("Ver.1" series) 1.89 SCO Unixware 7.1.3 SCO Unixware 7.1.1 SCO Open Server 5.0.7 SCO Open Server 5.0.6 Oracle Solaris 11 Oracle Solaris 10 NetScreen ScreenOS 5.0 NetScreen ScreenOS 4.0.3 r4 NetScreen ScreenOS 4.0.3 r3 NetScreen ScreenOS 4.0.3 r2 NetScreen ScreenOS 4.0.3 r1 NetScreen ScreenOS 4.0.3 NetScreen ScreenOS 4.0.2 NetScreen ScreenOS 4.0.1 r9 NetScreen ScreenOS 4.0.1 r8 NetScreen ScreenOS 4.0.1 r7 NetScreen ScreenOS 4.0.1 r6 NetScreen ScreenOS 4.0.1 r5 NetScreen ScreenOS 4.0.1 r4 NetScreen ScreenOS 4.0.1 r3 NetScreen ScreenOS 4.0.1 r2 NetScreen ScreenOS 4.0.1 r10 NetScreen ScreenOS 4.0.1 r1 NetScreen ScreenOS 4.0.1 NetScreen ScreenOS 4.0 r9 NetScreen ScreenOS 4.0 r8 NetScreen ScreenOS 4.0 r7 NetScreen ScreenOS 4.0 r6 NetScreen ScreenOS 4.0 r5 NetScreen ScreenOS 4.0 r4 NetScreen ScreenOS 4.0 r3 NetScreen ScreenOS 4.0 r2 NetScreen ScreenOS 4.0 r12 NetScreen ScreenOS 4.0 r11 NetScreen ScreenOS 4.0 r10 NetScreen ScreenOS 4.0 r1 NetScreen ScreenOS 4.0 -DIAL NetScreen ScreenOS 4.0 NetScreen ScreenOS 3.1.1 r2 NetScreen ScreenOS 3.1 r9 NetScreen ScreenOS 3.1 r8 NetScreen ScreenOS 3.1 r7 NetScreen ScreenOS 3.1 r6 NetScreen ScreenOS 3.1 r5 NetScreen ScreenOS 3.1 r4 NetScreen ScreenOS 3.1 r3 NetScreen ScreenOS 3.1 r2 NetScreen ScreenOS 3.1 r12 NetScreen ScreenOS 3.1 r11 NetScreen ScreenOS 3.1 r10 NetScreen ScreenOS 3.1 r1 NetScreen ScreenOS 3.1 NetScreen ScreenOS 3.0.3 r8 NetScreen ScreenOS 3.0.3 r7 NetScreen ScreenOS 3.0.3 r6 NetScreen ScreenOS 3.0.3 r5 NetScreen ScreenOS 3.0.3 r4 NetScreen ScreenOS 3.0.3 r3 NetScreen ScreenOS 3.0.3 r2 NetScreen ScreenOS 3.0.3 r1.1 NetScreen ScreenOS 3.0.3 r1 NetScreen ScreenOS 3.0.3 NetScreen ScreenOS 3.0.2 NetScreen ScreenOS 3.0.1 r7 NetScreen ScreenOS 3.0.1 r6 NetScreen ScreenOS 3.0.1 r5 NetScreen ScreenOS 3.0.1 r4 NetScreen ScreenOS 3.0.1 r3 NetScreen ScreenOS 3.0.1 r2 NetScreen ScreenOS 3.0.1 r1 NetScreen ScreenOS 3.0.1 NetScreen ScreenOS 3.0 r4 NetScreen ScreenOS 3.0 r3 NetScreen ScreenOS 3.0 r2 NetScreen ScreenOS 3.0 r1 NetScreen ScreenOS 3.0 NetScreen ScreenOS 2.10 r4 NetScreen ScreenOS 2.10 r3 NetScreen ScreenOS 2.8 r1 NetScreen ScreenOS 2.8 NetScreen ScreenOS 2.7.1 r3 NetScreen ScreenOS 2.7.1 r2 NetScreen ScreenOS 2.7.1 r1 NetScreen ScreenOS 2.7.1 NetScreen ScreenOS 2.6.1 r9 NetScreen ScreenOS 2.6.1 r8 NetScreen ScreenOS 2.6.1 r7 NetScreen ScreenOS 2.6.1 r6 NetScreen ScreenOS 2.6.1 r5 NetScreen ScreenOS 2.6.1 r4 NetScreen ScreenOS 2.6.1 r3 NetScreen ScreenOS 2.6.1 r2 NetScreen ScreenOS 2.6.1 r12 NetScreen ScreenOS 2.6.1 r11 NetScreen ScreenOS 2.6.1 r10 NetScreen ScreenOS 2.6.1 r1 NetScreen ScreenOS 2.6.1 NetScreen ScreenOS 2.6 NetScreen ScreenOS 2.5 r6 NetScreen ScreenOS 2.5 r2 NetScreen ScreenOS 2.5 r1 NetScreen ScreenOS 2.5 NetScreen ScreenOS 2.1 r7 NetScreen ScreenOS 2.1 r6 NetScreen ScreenOS 2.1 NetScreen ScreenOS 2.0.1 r8 NetScreen ScreenOS 1.73 r2 NetScreen ScreenOS 1.73 r1 NetScreen ScreenOS 1.66 r2 NetScreen ScreenOS 1.66 NetScreen ScreenOS 1.64 NetScreen ScreenOS 1.7 NetBSD NetBSD 2.0 NetBSD NetBSD 1.6.2 NetBSD NetBSD 1.6.1 NetBSD NetBSD 1.6 beta NetBSD NetBSD 1.6 NetBSD NetBSD 1.5.3 NetBSD NetBSD 1.5.2 NetBSD NetBSD 1.5.1 NetBSD NetBSD 1.5 Microsoft Windows XP Tablet PC Edition SP2 Microsoft Windows XP Tablet PC Edition SP1 Microsoft Windows XP Tablet PC Edition Microsoft Windows XP Professional x64 Edition Microsoft Windows XP Professional SP2 Microsoft Windows XP Professional SP1 Microsoft Windows XP Professional Microsoft Windows XP Media Center Edition SP2 Microsoft Windows XP Media Center Edition SP1 Microsoft Windows XP Media Center Edition Microsoft Windows XP Home SP2 Microsoft Windows XP Home SP1 Microsoft Windows XP Home Microsoft Windows XP Embedded SP1 Microsoft Windows XP Embedded Microsoft Windows XP 64-bit Edition Version 2003 Microsoft Windows XP 0 Microsoft Windows Server 2003 Web Edition SP1 Microsoft Windows Server 2003 Web Edition Microsoft Windows Server 2003 Standard x64 Edition Microsoft Windows Server 2003 Standard Edition SP1 Microsoft Windows Server 2003 Standard Edition Microsoft Windows Server 2003 Enterprise x64 Edition Microsoft Windows Server 2003 Enterprise Edition Itanium SP1 Microsoft Windows Server 2003 Enterprise Edition Itanium 0 Microsoft Windows Server 2003 Enterprise Edition SP1 Microsoft Windows Server 2003 Enterprise Edition Microsoft Windows Server 2003 Datacenter x64 Edition Microsoft Windows Server 2003 Datacenter Edition Itanium SP1 Microsoft Windows Server 2003 Datacenter Edition Itanium 0 Microsoft Windows Server 2003 Datacenter Edition SP1 Microsoft Windows Server 2003 Datacenter Edition Microsoft Windows 2000 Server SP4 Microsoft Windows 2000 Server SP3 Microsoft Windows 2000 Server SP2 Microsoft Windows 2000 Server SP1 Microsoft Windows 2000 Server Microsoft Windows 2000 Professional SP4 Microsoft Windows 2000 Professional SP3 Microsoft Windows 2000 Professional SP2 Microsoft Windows 2000 Professional SP1 Microsoft Windows 2000 Professional Microsoft Windows 2000 Datacenter Server SP4 Microsoft Windows 2000 Datacenter Server SP3 Microsoft Windows 2000 Datacenter Server SP2 Microsoft Windows 2000 Datacenter Server SP1 Microsoft Windows 2000 Datacenter Server Microsoft Windows 2000 Advanced Server SP4 Microsoft Windows 2000 Advanced Server SP3 Microsoft Windows 2000 Advanced Server SP2 Microsoft Windows 2000 Advanced Server SP1 Microsoft Windows 2000 Advanced Server McAfee Data Loss Prevention 9.2.2 McAfee Data Loss Prevention 9.2.1 McAfee Data Loss Prevention 9.2.0 McAfee Data Loss Prevention 8.6 Juniper T-series Router T640 Juniper T-series Router T320 Juniper M-series Router M5 Juniper M-series Router M40e Juniper M-series Router M40 Juniper M-series Router M20 Juniper M-series Router M160 Juniper M-series Router M10 Juniper E-series Router InterNiche NicheStack 2.0 InterNiche NicheLite 2.0 IETF RFC 793: TCP IETF RFC 1323: TCP Extensions for High Performance IBM AIX 5.3 L IBM AIX 5.2 L IBM AIX 5.1 L IBM AIX 5.3 IBM AIX 5.2 IBM AIX 5.1 HP Tru64 5.1 B-2 PK4 HP Tru64 5.1 B PK4 HP Tru64 5.1 B PK3 HP Tru64 5.1 A PK6 HP Tru64 4.0 G PK4 HP Tru64 4.0 F PK8 (BL22) HP Tru64 4.0 F PK8 HP ProCurve Switch 9315M HP ProCurve Switch 9308M HP ProCurve Switch 9304M HP Procurve Switch 8000M HP ProCurve Switch 5372XL J4848A HP ProCurve Switch 5348XL J4849A HP ProCurve Switch 5308XL J4819A HP ProCurve Switch 5304XL J4850A HP Procurve Switch 4108GL-bundle HP ProCurve Switch 4108GL J4865A HP Procurve Switch 4108GL HP ProCurve Switch 4000M J4121A HP Procurve Switch 4000M HP Procurve Switch 2525 HP ProCurve Switch 2524 J4813A HP Procurve Switch 2524 HP Procurve Switch 2512 HP ProCurve Switch 2424M J4093A HP Procurve Switch 2424M HP ProCurve Switch 2400M J4122A HP Procurve Switch 2400M HP Procurve Switch 1600M HP EtherTwist HP Advancestack Switch 800T J3245A HP AdvanceStack 10Base-T Switching Hub J3210A A.03.07 HP AdvanceStack 10Base-T Switching Hub J3205A A.03.07 HP AdvanceStack 10Base-T Switching Hub J3204A A.03.07 HP AdvanceStack 10Base-T Switching Hub J3203A A.03.07 HP AdvanceStack 10Base-T Switching Hub J3202A A.03.07 HP AdvanceStack 10Base-T Switching Hub J3201A A.03.07 HP AdvanceStack 10Base-T Switching Hub J3200A A.03.07 FreeBSD FreeBSD 9.3-RELEASE-p1 FreeBSD FreeBSD 9.3-RC3-p1 FreeBSD FreeBSD 9.3-RC2-p1 FreeBSD FreeBSD 9.3-RC2 FreeBSD FreeBSD 9.3-RC1-p2 FreeBSD FreeBSD 9.3-RC FreeBSD FreeBSD 9.3-PRERELEASE FreeBSD FreeBSD 9.3-BETA3-p2 FreeBSD FreeBSD 9.3-BETA1-p2 FreeBSD FreeBSD 9.3-BETA1-p1 FreeBSD FreeBSD 9.3-BETA1 FreeBSD FreeBSD 9.3 FreeBSD FreeBSD 9.2-STABLE FreeBSD FreeBSD 9.2-RELENG FreeBSD FreeBSD 9.2-RELEASE-p9 FreeBSD FreeBSD 9.2-RELEASE-p8 FreeBSD FreeBSD 9.2-RELEASE-p7 FreeBSD FreeBSD 9.2-RELEASE-p5 FreeBSD FreeBSD 9.2-RELEASE-p4 FreeBSD FreeBSD 9.2-RELEASE-p3 FreeBSD FreeBSD 9.2-RELEASE-p11 FreeBSD FreeBSD 9.2-RELEASE-p10 FreeBSD FreeBSD 9.2-RC3-p1 FreeBSD FreeBSD 9.2-RC2-p2 FreeBSD FreeBSD 9.2-RC2 FreeBSD FreeBSD 9.2-RC1-p2 FreeBSD FreeBSD 9.2-RC1 FreeBSD FreeBSD 9.2 Rc2 FreeBSD FreeBSD 9.2 Rc1 FreeBSD FreeBSD 9.2 Prerelease FreeBSD FreeBSD 9.2 - FreeBSD FreeBSD 9.2 FreeBSD FreeBSD 9.1-STABLE FreeBSD FreeBSD 9.1-RELENG FreeBSD FreeBSD 9.1-RELEASE-p7 FreeBSD FreeBSD 9.1-RELEASE-p3 FreeBSD FreeBSD 9.1-RELEASE-p18 FreeBSD FreeBSD 9.1-RELEASE-p17 FreeBSD FreeBSD 9.1-RELEASE-p16 FreeBSD FreeBSD 9.1-RELEASE-p15 FreeBSD FreeBSD 9.1-RELEASE-p14 FreeBSD FreeBSD 9.1-RELEASE-p12 FreeBSD FreeBSD 9.1-RELEASE-p11 FreeBSD FreeBSD 9.1-RELEASE-p10 FreeBSD FreeBSD 9.1-RELEASE-p1 FreeBSD FreeBSD 9.1-RC2 FreeBSD FreeBSD 9.1-RC1 FreeBSD FreeBSD 9.1--RELENG FreeBSD FreeBSD 9.1 Release-P5 FreeBSD FreeBSD 9.1 Release-P4 FreeBSD FreeBSD 9.1 FreeBSD FreeBSD 9.0-STABLE FreeBSD FreeBSD 9.0-RELENG FreeBSD FreeBSD 9.0-RELEASE-p6 FreeBSD FreeBSD 9.0-RELEASE FreeBSD FreeBSD 9.0-RC3 FreeBSD FreeBSD 9.0-RC1 FreeBSD FreeBSD 9.0--RELENG FreeBSD FreeBSD 9.0 FreeBSD FreeBSD 8.4-RELENG FreeBSD FreeBSD 8.4-RELEASE-p9 FreeBSD FreeBSD 8.4-RELEASE-p8 FreeBSD FreeBSD 8.4-RELEASE-p7 FreeBSD FreeBSD 8.4-RELEASE-p4 FreeBSD FreeBSD 8.4-RELEASE-p15 FreeBSD FreeBSD 8.4-RELEASE-p14 FreeBSD FreeBSD 8.4-RELEASE-p13 FreeBSD FreeBSD 8.4-RELEASE-p12 FreeBSD FreeBSD 8.4-RELEASE-p11 FreeBSD FreeBSD 8.4-RC2-p1 FreeBSD FreeBSD 8.4-RC1-p1 FreeBSD FreeBSD 8.4-PRERELEASE FreeBSD FreeBSD 8.4-BETA1 FreeBSD FreeBSD 8.4 FreeBSD FreeBSD 8.3-STABLE FreeBSD FreeBSD 8.3-RELENG FreeBSD FreeBSD 8.3-RELEASE-p8 FreeBSD FreeBSD 8.3-RELEASE-p6 FreeBSD FreeBSD 8.3-RELEASE-p16 FreeBSD FreeBSD 8.3-RELEASE-p15 FreeBSD FreeBSD 8.3-RELEASE-p14 FreeBSD FreeBSD 8.3-RELEASE-p11 FreeBSD FreeBSD 8.3 FreeBSD FreeBSD 8.2-STABLE FreeBSD FreeBSD 8.2-RELEASE-p2 FreeBSD FreeBSD 8.2-RELEASE-p1 FreeBSD FreeBSD 8.2-RELEASE FreeBSD FreeBSD 8.2 - RELEASE -p3 FreeBSD FreeBSD 8.2 FreeBSD FreeBSD 8.1-STABLE FreeBSD FreeBSD 8.1-RELENG FreeBSD FreeBSD 8.1-RELEASE-p5 FreeBSD FreeBSD 8.1-RELEASE-p4 FreeBSD FreeBSD 8.1-RELEASE-p1 FreeBSD FreeBSD 8.1-RELEASE FreeBSD FreeBSD 8.1-PRERELEASE FreeBSD FreeBSD 8.1 FreeBSD FreeBSD 8.0-STABLE FreeBSD FreeBSD 8.0-RELEASE FreeBSD FreeBSD 8.0-RC1 FreeBSD FreeBSD 8.0 -RELEASE-p5 FreeBSD FreeBSD 8.0 FreeBSD FreeBSD 8-STABLE FreeBSD FreeBSD 8-RELENG FreeBSD FreeBSD 10.0-RELEASE-p8 FreeBSD FreeBSD 10.0-RELEASE-p7 FreeBSD FreeBSD 10.0-RELEASE-p6 FreeBSD FreeBSD 10.0-RELEASE-p5 FreeBSD FreeBSD 10.0-RELEASE-p4 FreeBSD FreeBSD 10.0-RELEASE-p2 FreeBSD FreeBSD 10.0-RELEASE-p1 FreeBSD FreeBSD 10.0-RC3-p1 FreeBSD FreeBSD 10.0-RC2-p1 FreeBSD FreeBSD 10.0-RC1-p1 FreeBSD FreeBSD 10.0-BETA FreeBSD Freebsd 10.0 FreeBSD FreeBSD 10 Cray UNICOS/mp 2.3 Cray UNICOS/mp Cray UNICOS/mk 2.0.5 .54 Cray UNICOS/mk 1.5.1 Cray UNICOS/mk 1.5 Cray UNICOS MAX 1.3 .5 Cray UNICOS MAX 1.3 Cray UNICOS 9.2 .4 Cray UNICOS 9.2 Cray UNICOS 9.0.2 .5 Cray UNICOS 9.0 Cray UNICOS 8.3 Cray UNICOS 8.0 Cray UNICOS 7.0 Cray UNICOS 6.1 Cray UNICOS 6.0 E Cray UNICOS 6.0 Cisco ws-x6624 Cisco ws-x6608 Cisco Wireless Lan Solution Engine Cisco Wireless LAN Solution Appliance Cisco WGB340 Cisco WAN Manager Cisco VPN 5008 Concentrator Cisco VPN 5002 Concentrator Cisco VPN 5001 Concentrator Cisco Voice Manager Cisco VG248 Analog Phone Gateway Cisco User Registration Tool VLAN Policy Server Cisco Unity Server 4.0 Cisco Unity Server 3.3 Cisco Unity Server 3.2 Cisco Unity Server 3.1 Cisco Unity Server 3.0 Cisco Unity Server 2.46 Cisco Unity Server 2.4 Cisco Unity Server 2.3 Cisco Unity Server 2.2 Cisco Unity Server 2.1 Cisco Unity Server 2.0 Cisco Unity Server Cisco Traffic Director Cisco SwitchProbe 5.1 Cisco SwitchProbe 4.7 Cisco SwitchProbe 4.6 Cisco SwitchProbe 4.5 Cisco SwitchProbe 4.2 Cisco SwitchProbe 4.1 Cisco SwitchProbe 3.1 Cisco SN5400 series storage routers Cisco SN 5428 Storage Router SN5428-3.3.2-K9 Cisco SN 5428 Storage Router SN5428-3.3.1-K9 Cisco SN 5428 Storage Router SN5428-3.2.2-K9 Cisco SN 5428 Storage Router SN5428-3.2.1-K9 Cisco SN 5428 Storage Router SN5428-2.5.1-K9 Cisco SN 5428 Storage Router SN5428-2-3.3.2-K9 Cisco SN 5428 Storage Router SN5428-2-3.3.1-K9 Cisco SN 5420 Storage Router 1.1.3 Cisco SN 5420 Storage Router 1.1 (7) Cisco SN 5420 Storage Router 1.1 (5) Cisco SN 5420 Storage Router 1.1 (4) Cisco SN 5420 Storage Router 1.1 (3) Cisco SN 5420 Storage Router 1.1 (2) Cisco Secure PIX Firewall Cisco Secure Intrusion Detection System (NetRanger) 0 Cisco RTM Cisco PIX Firewall 6.3.1 Cisco PIX Firewall 6.3 (3.109) Cisco PIX Firewall 6.3 (3.102) Cisco PIX Firewall 6.3 (1) Cisco PIX Firewall 6.3 Cisco PIX Firewall 6.2.3 Cisco PIX Firewall 6.2.2 .111 Cisco PIX Firewall 6.2.2 Cisco PIX Firewall 6.2.1 Cisco PIX Firewall 6.2 (3.100) Cisco PIX Firewall 6.2 (3) Cisco PIX Firewall 6.2 (2) Cisco PIX Firewall 6.2 (1) Cisco PIX Firewall 6.2 Cisco PIX Firewall 6.1.5 Cisco PIX Firewall 6.1.4 Cisco PIX Firewall 6.1.3 Cisco PIX Firewall 6.1 (5) Cisco PIX Firewall 6.1 (4) Cisco PIX Firewall 6.1 (3) Cisco PIX Firewall 6.1 (2) Cisco PIX Firewall 6.1 (1) Cisco PIX Firewall 6.1 Cisco PIX Firewall 6.0.4 Cisco PIX Firewall 6.0.3 Cisco PIX Firewall 6.0 (4.101) Cisco PIX Firewall 6.0 (4) Cisco PIX Firewall 6.0 (2) Cisco PIX Firewall 6.0 (1) Cisco PIX Firewall 6.0 Cisco Parallel Channel Port Adapter (PCPA) Cisco ONS 15863 T31 Submarine WDM System Cisco ONS 15832 T31 DWDM System Cisco ONS 15831 T31 DWDM System Cisco ONS 15830 T30 Optical Amplification System Cisco ONS 15808 Dense Wave Division MuX Platform Cisco ONS 15801 Dense Wave Division MuX Platform Cisco ONS 15800 Dense Wave Division MuX Platform Cisco ONS 15532 T31 OMDS Metro WDM System Cisco ONS 15531 T31 OMDS Metro WDM System Cisco ONS 15454 Optical Transport Platform 4.1 (3) Cisco ONS 15454 Optical Transport Platform 4.1 (2) Cisco ONS 15454 Optical Transport Platform 4.1 (1) Cisco ONS 15454 Optical Transport Platform 4.1 (0) Cisco ONS 15454 Optical Transport Platform 4.1 Cisco ONS 15454 Optical Transport Platform 4.0 (2) Cisco ONS 15454 Optical Transport Platform 4.0 (1) Cisco ONS 15454 Optical Transport Platform 4.0 Cisco ONS 15454 Optical Transport Platform 3.4 Cisco ONS 15454 Optical Transport Platform 3.3 Cisco ONS 15454 Optical Transport Platform 3.2 .0 Cisco ONS 15454 Optical Transport Platform 3.1 .0 Cisco ONS 15454 Optical Transport Platform 3.0 Cisco ONS 15327 4.1 (3) Cisco ONS 15327 4.1 (2) Cisco ONS 15327 4.1 (1) Cisco ONS 15327 4.1 (0) Cisco ONS 15327 4.0 (2) Cisco ONS 15327 4.0 (1) Cisco ONS 15327 4.0 Cisco ONS 15327 3.4 Cisco ONS 15327 3.3 Cisco ONS 15327 3.2 Cisco ONS 15327 3.1 Cisco ONS 15327 3.0 Cisco ONS 15194 IP Transport Concentrator Cisco ONS 15190 IP Transport Concentrator Cisco MicroSwitch 1548 Cisco MicroSwitch 1538 Cisco MicroHub 1500 Cisco MGX-8850 R2 Cisco MGX-8850 R1 Cisco MGX-8260 Cisco MGX-8240 Cisco MGX-8220 Cisco MGX 8850 - PXM1 1.2.11 Cisco MGX 8850 - PXM1 1.2.10 Cisco MGX 8850 Cisco MGX 8830 Cisco MGX 8250 1.2.11 Cisco MGX 8250 1.2.10 Cisco MGX 8230 1.2.11 Cisco MGX 8230 1.2.10 Cisco MGX Cisco ME1100 Cisco MDS 9000 2.0 (0.86) Cisco MDS 9000 1.3 (3.33) Cisco MDS 9000 Cisco Local Director Cisco LightStream 1010 Cisco LightStream 100 ATM Switches Cisco IP/TV Server Cisco IP Phone 7960 Cisco IP Phone 7940 Cisco IP Phone 7905 Cisco IOS 12.3XQ Cisco IOS 12.3XN Cisco IOS 12.3XM Cisco IOS 12.3XL Cisco IOS 12.3XK Cisco IOS 12.3XJ Cisco IOS 12.3XI Cisco IOS 12.3XH Cisco IOS 12.3XG Cisco IOS 12.3XF Cisco IOS 12.3XE Cisco IOS 12.3XD Cisco IOS 12.3XC Cisco IOS 12.3XB Cisco IOS 12.3XA Cisco IOS 12.3T Cisco IOS 12.3BW Cisco IOS 12.3B Cisco IOS 12.3 Cisco IOS 12.2ZP Cisco IOS 12.2ZN Cisco IOS 12.2ZL Cisco IOS 12.2ZK Cisco IOS 12.2ZJ Cisco IOS 12.2ZI Cisco IOS 12.2ZH Cisco IOS 12.2ZG Cisco IOS 12.2ZF Cisco IOS 12.2ZE Cisco IOS 12.2ZD Cisco IOS 12.2ZC Cisco IOS 12.2ZB Cisco IOS 12.2ZA Cisco IOS 12.2YZ Cisco IOS 12.2YY Cisco IOS 12.2YX Cisco IOS 12.2YW Cisco IOS 12.2YV Cisco IOS 12.2YU Cisco IOS 12.2YT Cisco IOS 12.2YS Cisco IOS 12.2YR Cisco IOS 12.2YQ Cisco IOS 12.2YP Cisco IOS 12.2YO Cisco IOS 12.2YN Cisco IOS 12.2YM Cisco IOS 12.2YL Cisco IOS 12.2YK Cisco IOS 12.2YJ Cisco IOS 12.2YH Cisco IOS 12.2YG Cisco IOS 12.2YF Cisco IOS 12.2YE Cisco IOS 12.2YD Cisco IOS 12.2YC Cisco IOS 12.2YB Cisco IOS 12.2YA Cisco IOS 12.2XW Cisco IOS 12.2XU Cisco IOS 12.2XT Cisco IOS 12.2XS Cisco IOS 12.2XQ Cisco IOS 12.2XN Cisco IOS 12.2XM Cisco IOS 12.2XL Cisco IOS 12.2XK Cisco IOS 12.2XJ Cisco IOS 12.2XI Cisco IOS 12.2XH Cisco IOS 12.2XG Cisco IOS 12.2XF Cisco IOS 12.2XE Cisco IOS 12.2XD Cisco IOS 12.2XC Cisco IOS 12.2XB Cisco IOS 12.2XA Cisco IOS 12.2T Cisco IOS 12.2SZ Cisco IOS 12.2SY Cisco IOS 12.2SXB Cisco IOS 12.2SXA Cisco IOS 12.2SX Cisco IOS 12.2SW Cisco IOS 12.2SE Cisco IOS 12.2S Cisco IOS 12.2MC Cisco IOS 12.2JA Cisco IOS 12.2EW Cisco IOS 12.2DX Cisco IOS 12.2DD Cisco IOS 12.2CX Cisco IOS 12.2BZ Cisco IOS 12.2BY Cisco IOS 12.2BX Cisco IOS 12.2BW Cisco IOS 12.2BC Cisco IOS 12.2B Cisco IOS 12.2 Cisco IOS 12.1YJ Cisco IOS 12.1YI Cisco IOS 12.1YH Cisco IOS 12.1YF Cisco IOS 12.1YE Cisco IOS 12.1YD Cisco IOS 12.1YC Cisco IOS 12.1YB Cisco IOS 12.1YA Cisco IOS 12.1XV Cisco IOS 12.1XU Cisco IOS 12.1XT Cisco IOS 12.1XR Cisco IOS 12.1XQ Cisco IOS 12.1XP Cisco IOS 12.1XM Cisco IOS 12.1XL Cisco IOS 12.1XJ Cisco IOS 12.1XI Cisco IOS 12.1XH Cisco IOS 12.1XG Cisco IOS 12.1XF Cisco IOS 12.1XE Cisco IOS 12.1XD Cisco IOS 12.1XC Cisco IOS 12.1XB Cisco IOS 12.1XA Cisco IOS 12.1T Cisco IOS 12.1EY Cisco IOS 12.1EX Cisco IOS 12.1EW Cisco IOS 12.1EV Cisco IOS 12.1EU Cisco IOS 12.1EO Cisco IOS 12.1EC Cisco IOS 12.1EB Cisco IOS 12.1EA Cisco IOS 12.1E Cisco IOS 12.1DB Cisco IOS 12.1DA Cisco IOS 12.1AY Cisco IOS 12.1AX Cisco IOS 12.1AA Cisco IOS 12.1(20)E2 Cisco IOS 12.1 Cisco IOS 12.0XV Cisco IOS 12.0XU Cisco IOS 12.0XS Cisco IOS 12.0XR Cisco IOS 12.0XQ Cisco IOS 12.0XP Cisco IOS 12.0XN Cisco IOS 12.0XM Cisco IOS 12.0XL Cisco IOS 12.0XK Cisco IOS 12.0XJ Cisco IOS 12.0XI Cisco IOS 12.0XH Cisco IOS 12.0XG Cisco IOS 12.0XE Cisco IOS 12.0XD Cisco IOS 12.0XC Cisco IOS 12.0XB Cisco IOS 12.0XA Cisco IOS 12.0WX Cisco IOS 12.0WT Cisco IOS 12.0WC Cisco IOS 12.0W5 Cisco IOS 12.0T Cisco IOS 12.0SZ Cisco IOS 12.0SX Cisco IOS 12.0ST Cisco IOS 12.0SL Cisco IOS 12.0S Cisco IOS 12.0DC Cisco IOS 12.0DB Cisco IOS 12.0DA Cisco IOS 12.0 Cisco IOS 11.3 Cisco IOS 11.2SA Cisco IOS 11.2P Cisco IOS 11.2 Cisco IOS 11.1CC Cisco IOS 11.1AA Cisco IOS 11.1 Cisco Internet CDN Content Engine 7320 Cisco Internet CDN Content Engine 590 Cisco Intelligent Contact Manager 5.0 Cisco Intelligent Contact Manager Cisco InfoCenter Cisco IGX 8400 Cisco Hosting Solution Engine 1.3 Cisco Hosting Solution Engine 1.0 Cisco GSS 4490 Global Site Selector 0 Cisco GSS 4480 Global Site Selector Cisco FastHub 400 1.0 Cisco FastHub 300 Cisco ESCON Channel Port Adapter (ECPA) Cisco Element Management Framework Cisco Device Fault Manager Cisco CSS11800 Content Services Switch Cisco CSS11500 Content Services Switch Cisco CSS11150 Content Services Switch Cisco CSS11050 Content Services Switch Cisco CSS11000 Content Services Switch Cisco CSM Cisco CR-4430-B Cisco Content Router 4450 Cisco Content Router 4430 4.1 Cisco Content Router 4430 4.0 Cisco Content Router 4430 Cisco Content Engine 7320 4.1 Cisco Content Engine 7320 4.0 Cisco Content Engine 7320 3.1 Cisco Content Engine 7320 2.2 .0 Cisco Content Engine 7320 Cisco Content Engine 590 4.1 Cisco Content Engine 590 4.0 Cisco Content Engine 590 3.1 Cisco Content Engine 590 2.2 .0 Cisco Content Engine 590 Cisco Content Engine 560 4.1 Cisco Content Engine 560 4.0 Cisco Content Engine 560 3.1 Cisco Content Engine 560 2.2 .0 Cisco Content Engine 560 Cisco Content Engine 507 4.1 Cisco Content Engine 507 4.0 Cisco Content Engine 507 3.1 Cisco Content Engine 507 2.2 .0 Cisco Content Engine 507 Cisco Content Distribution Manager 4670 Cisco Content Distribution Manager 4650 4.1 Cisco Content Distribution Manager 4650 4.0 Cisco Content Distribution Manager 4650 Cisco Content Distribution Manager 4630 4.1 Cisco Content Distribution Manager 4630 4.0 Cisco Content Distribution Manager 4630 Cisco Content Delivery Manager 4650 Cisco Content Delivery Manager 4630 Cisco CiscoWorks Windows 0 Cisco CiscoSecure ACS for Windows and Unix 0 Cisco CiscoSecure ACS 1111 Appliance Cisco Channel Port Adapter (CPA) Cisco Channel Interface Processor (CIP) Cisco Catalyst 6500 Series SSL Services Module Cisco Catalyst 6000 7.6 (1) Cisco Catalyst 6000 7.5 (1) Cisco Catalyst 6000 7.1 (2) Cisco Catalyst 6000 7.1 Cisco Catalyst 6000 6.3 (4) Cisco Catalyst 6000 6.3 (0.7)PAN Cisco Catalyst 6000 6.2 (0.111) Cisco Catalyst 6000 6.2 (0.110) Cisco Catalyst 6000 6.1 (2.13) Cisco Catalyst 6000 6.1 (1c) Cisco Catalyst 6000 6.1 (1b) Cisco Catalyst 6000 6.1 (1a) Cisco Catalyst 6000 6.1 (1) Cisco Catalyst 6000 5.5 (4b) Cisco Catalyst 6000 5.5 (4a) Cisco Catalyst 6000 5.5 (4) Cisco Catalyst 6000 5.5 (3) Cisco Catalyst 6000 5.5 (2) Cisco Catalyst 6000 5.5 (13) Cisco Catalyst 6000 5.5 (1) Cisco Catalyst 6000 5.5 Cisco Catalyst 6000 5.4.1 Cisco Catalyst 6000 5.4 (4) Cisco Catalyst 6000 5.4 (3) Cisco Catalyst 6000 5.4 (2) Cisco Catalyst 6000 5.4 (1) Cisco Catalyst 6000 5.4 Cisco Catalyst 6000 5.3 (6)CSX Cisco Catalyst 6000 5.3 (5a)CSX Cisco Catalyst 6000 5.3 (5)CSX Cisco Catalyst 6000 5.3 (4)CSX Cisco Catalyst 6000 5.3 (3)CSX Cisco Catalyst 6000 5.3 (2)CSX Cisco Catalyst 6000 5.3 (1a)CSX Cisco Catalyst 6000 5.3 (1)CSX Cisco Catalyst 6000 3.1 (1a)WS-X6380-NAM Cisco Catalyst 6000 3.1 (1a)WS-SVC-NAM-2 Cisco Catalyst 6000 3.1 (1a)WS-SVC-NAM-1 Cisco Catalyst 6000 2.2 (1a)WS-SVC-NAM-2 Cisco Catalyst 6000 2.2 (1a)WS-SVC-NAM-1 Cisco Catalyst 6000 2.1 (2)WS-X6380-NAM Cisco Catalyst 5000 6.3 (4) Cisco Catalyst 5000 6.1 (3) Cisco Catalyst 5000 6.1 (2) Cisco Catalyst 5000 6.1 (1c) Cisco Catalyst 5000 6.1 (1b) Cisco Catalyst 5000 6.1 (1a) Cisco Catalyst 5000 6.1 (1) Cisco Catalyst 5000 5.5 (7) Cisco Catalyst 5000 5.5 (6) Cisco Catalyst 5000 5.5 (4b) Cisco Catalyst 5000 5.5 (4) Cisco Catalyst 5000 5.5 (3) Cisco Catalyst 5000 5.5 (2) Cisco Catalyst 5000 5.5 (13) Cisco Catalyst 5000 5.5 (1) Cisco Catalyst 5000 5.4.1 Cisco Catalyst 5000 5.4 (4) Cisco Catalyst 5000 5.4 (3) Cisco Catalyst 5000 5.4 (2) Cisco Catalyst 5000 5.4 (1) Cisco Catalyst 5000 5.2 (4) Cisco Catalyst 5000 5.2 (3) Cisco Catalyst 5000 5.2 (2) Cisco Catalyst 5000 5.2 (1) Cisco Catalyst 5000 5.2 Cisco Catalyst 5000 5.1 (2a) Cisco Catalyst 5000 5.1 (1) Cisco Catalyst 5000 5.1 Cisco Catalyst 5000 4.5 (9) Cisco Catalyst 5000 4.5 (8) Cisco Catalyst 5000 4.5 (7) Cisco Catalyst 5000 4.5 (6) Cisco Catalyst 5000 4.5 (5) Cisco Catalyst 5000 4.5 (4b) Cisco Catalyst 5000 4.5 (4) Cisco Catalyst 5000 4.5 (3) Cisco Catalyst 5000 4.5 (2) Cisco Catalyst 5000 4.5 (13a) Cisco Catalyst 5000 4.5 (12) Cisco Catalyst 5000 4.5 (11) Cisco Catalyst 5000 4.5 (10) Cisco Catalyst 5000 Cisco Catalyst 4000 7.6 (1) Cisco Catalyst 4000 7.5 (1) Cisco Catalyst 4000 7.1.2 Cisco Catalyst 4000 7.1 (2) Cisco Catalyst 4000 7.1 Cisco Catalyst 4000 6.3.5 Cisco Catalyst 4000 6.3 (4) Cisco Catalyst 4000 6.1 (1c) Cisco Catalyst 4000 6.1 (1b) Cisco Catalyst 4000 6.1 (1a) Cisco Catalyst 4000 6.1 (1) Cisco Catalyst 4000 5.5.5 Cisco Catalyst 4000 5.5 (4b) Cisco Catalyst 4000 5.5 (4) Cisco Catalyst 4000 5.5 (3) Cisco Catalyst 4000 5.5 (2) Cisco Catalyst 4000 5.5 (13) Cisco Catalyst 4000 5.5 (1) Cisco Catalyst 4000 5.5 Cisco Catalyst 4000 5.4.1 Cisco Catalyst 4000 5.4 (3) Cisco Catalyst 4000 5.4 (2) Cisco Catalyst 4000 5.4 (1) Cisco Catalyst 4000 5.4 Cisco Catalyst 4000 5.2 (7) Cisco Catalyst 4000 5.2 (6) Cisco Catalyst 4000 5.2 (5) Cisco Catalyst 4000 5.2 (4) Cisco Catalyst 4000 5.2 (2) Cisco Catalyst 4000 5.2 (1a) Cisco Catalyst 4000 5.2 (1) Cisco Catalyst 4000 5.2 Cisco Catalyst 4000 5.1 (2a) Cisco Catalyst 4000 5.1 (1a) Cisco Catalyst 4000 5.1 (1) Cisco Catalyst 4000 5.1 Cisco Catalyst 4000 4.5 (9) Cisco Catalyst 4000 4.5 (8) Cisco Catalyst 4000 4.5 (7) Cisco Catalyst 4000 4.5 (6) Cisco Catalyst 4000 4.5 (5) Cisco Catalyst 4000 4.5 (4b) Cisco Catalyst 4000 4.5 (4) Cisco Catalyst 4000 4.5 (3) Cisco Catalyst 4000 4.5 (2) Cisco Catalyst 4000 4.5 (10) Cisco Catalyst 4000 Cisco Catalyst 3900 Cisco Catalyst 3000 Cisco Catalyst 29xx supervisor software 2.4.401 Cisco Catalyst 29xx supervisor software 2.1.1102 Cisco Catalyst 29xx supervisor software 2.1.6 Cisco Catalyst 29xx supervisor software 2.1.5 02 Cisco Catalyst 29xx supervisor software 2.1.5 01 Cisco Catalyst 29xx supervisor software 2.1.5 Cisco Catalyst 29xx supervisor software 1.0 Cisco Catalyst 2950 Cisco Catalyst 2948G-l3 Cisco Catalyst 2948G-GE-TX Cisco Catalyst 2948G Cisco Catalyst 2920 Cisco Catalyst 2900 XL Cisco Catalyst 2900 LRE XL Cisco Catalyst 2900 12.0 (5.2)XU Cisco Catalyst 2900 11.2 (8.2)SA6 Cisco Catalyst 2900 6.1 (3) Cisco Catalyst 2900 6.1 (2) Cisco Catalyst 2900 5.5 (7) Cisco Catalyst 2900 5.5 (6) Cisco Catalyst 2900 4.5 (12) Cisco Catalyst 2900 4.5 (11) Cisco Catalyst 2900 Cisco Catalyst 2820 Cisco Catalyst 2800 Cisco Catalyst 1900 Cisco Catalyst 1200 Cisco Call Manager 4.0 Cisco Call Manager 3.3 (3) Cisco Call Manager 3.3 Cisco Call Manager 3.2 Cisco Call Manager 3.1 (3a) Cisco Call Manager 3.1 (2) Cisco Call Manager 3.1 Cisco Call Manager 3.0 Cisco Call Manager 2.0 Cisco Call Manager 1.0 Cisco Call Manager Cisco Cache Engine 570 4.1 Cisco Cache Engine 570 4.0 Cisco Cache Engine 570 3.0 Cisco Cache Engine 570 2.2 .0 Cisco Cache Engine 570 Cisco Cache Engine 505 4.1 Cisco Cache Engine 505 4.0 Cisco Cache Engine 505 3.0 Cisco Cache Engine 505 2.2 .0 Cisco Cache Engine 505 Cisco BR350 Cisco BR340 Cisco BPX/IGX Cisco BPX 8600 Cisco BPX Cisco Application & Content Networking Software (ACNS) Cisco AP350 Cisco AP340 Cisco Access Registrar Cisco 8950 Wan Switch Cisco 8110 Broadband Network Termination Unit Check Point Software VPN-1 VSX NG with Application Intelligence Check Point Software VPN-1 Next Generation FP2 Check Point Software VPN-1 Next Generation FP1 Check Point Software VPN-1 Next Generation FP0 Check Point Software VPN-1 4.1 SP6 Check Point Software VPN-1 4.1 SP5a Check Point Software VPN-1 4.1 SP5 Check Point Software VPN-1 4.1 SP4 Check Point Software VPN-1 4.1 SP3 Check Point Software VPN-1 4.1 SP2 Check Point Software VPN-1 4.1 SP1 Check Point Software VPN-1 4.1 Check Point Software VPN-1 FP1 Check Point Software SecurePlatform NG FP2 Edition 2 Check Point Software SecurePlatform NG FP2 Check Point Software SecurePlatform NG FP1 Check Point Software SecurePlatform NG Check Point Software FireWall-1 VSX NG with Application Intelligence Check Point Software FireWall-1 Next Generation FP2 Check Point Software FireWall-1 Next Generation FP1 Check Point Software FireWall-1 Next Generation FP0 Check Point Software FireWall-1 GX 2.0 Check Point Software Firewall-1 [ VPN + DES ] 4.1 Check Point Software Firewall-1 [ VPN + DES + STRONG ] 4.1 SP2 Build 41716 Check Point Software Firewall-1 [ VPN + DES + STRONG ] 4.1 Build 41439 Check Point Software Firewall-1 4.1 SP6 Check Point Software Firewall-1 4.1 SP5a Check Point Software Firewall-1 4.1 SP5 Check Point Software Firewall-1 4.1 SP4 Check Point Software Firewall-1 4.1 SP3 Check Point Software Firewall-1 4.1 SP2 Check Point Software Firewall-1 4.1 SP1 Check Point Software Firewall-1 4.1 Check Point Software Firewall-1 4.0 SP8 Check Point Software Firewall-1 4.0 SP7 Check Point Software Firewall-1 4.0 SP6 Check Point Software Firewall-1 4.0 SP5 Check Point Software Firewall-1 4.0 SP4 Check Point Software Firewall-1 4.0 SP3 Check Point Software Firewall-1 4.0 SP2 Check Point Software Firewall-1 4.0 SP1 Check Point Software Firewall-1 4.0 Check Point Software Firewall-1 3.0 Blue Coat Systems Security Gateway OS 3.1.2 Blue Coat Systems Security Gateway OS 3.1 Blue Coat Systems Security Gateway OS 3.0 Blue Coat Systems Security Gateway OS 2.1.5001 SP1 Blue Coat Systems Security Gateway OS 2.1.10 Blue Coat Systems Security Gateway OS 2.1.9 Blue Coat Systems Security Gateway OS 2.0 Blue Coat Systems CacheOS CA/SA 4.1.12 Blue Coat Systems CacheOS CA/SA 4.1.10 Avaya Modular Messaging (MAS) 3.0 Avaya Intuity Audix R5 0 Avaya CMS R17 R3 Avaya CMS r17 Avaya CMS R16 R6 Avaya CMS R16 R5 Avaya CMS R16 AlienVault AlienVault 5.0.4 AlienVault AlienVault 5.0 AlienVault AlienVault 4.15.2 AlienVault AlienVault 4.15.1 AlienVault AlienVault 4.15 AlienVault AlienVault 4.14 AlienVault AlienVault 4.13 AlienVault AlienVault 4.12.1 AlienVault AlienVault 4.12 |
| Not Vulnerable: |
McAfee Network Data Loss Prevention 9.3 FreeBSD FreeBSD 9.3-STABLE FreeBSD FreeBSD 9.3-RELEASE-p2 FreeBSD FreeBSD 9.2-RELEASE-p12 FreeBSD FreeBSD 9.1-RELEASE-p19 FreeBSD FreeBSD 8.4-STABLE FreeBSD FreeBSD 8.4-RELEASE-p16 FreeBSD FreeBSD 10.1-PRERELEASE FreeBSD FreeBSD 10.1-BETA1-p1 FreeBSD FreeBSD 10.0-RELEASE-p9 Cisco VPN 3080 Concentrator Cisco VPN 3060 Concentrator Cisco VPN 3030 Concentrator Cisco VPN 3015 Concentrator Cisco VPN 3005 Concentrator 4.0.1 Cisco VPN 3005 Concentrator 4.0 Cisco VPN 3005 Concentrator 3.6.7 F Cisco VPN 3005 Concentrator 3.6.7 D Cisco VPN 3005 Concentrator 3.6.7 C Cisco VPN 3005 Concentrator 3.6.7 B Cisco VPN 3005 Concentrator 3.6.7 A Cisco VPN 3005 Concentrator 3.6.7 Cisco VPN 3005 Concentrator 3.6.5 Cisco VPN 3005 Concentrator 3.6.3 Cisco VPN 3002 Hardware Client Cisco VPN 3000 Concentrator 4.0.1 Cisco VPN 3000 Concentrator 4.0 .x Cisco VPN 3000 Concentrator 4.0 Cisco VPN 3000 Concentrator 3.6.7 D Cisco VPN 3000 Concentrator 3.6.7 Cisco VPN 3000 Concentrator 3.6.1 Cisco VPN 3000 Concentrator 3.6 Cisco VPN 3000 Concentrator 3.5.5 Cisco VPN 3000 Concentrator 3.5.4 Cisco VPN 3000 Concentrator 3.5.3 Cisco VPN 3000 Concentrator 3.5.2 Cisco VPN 3000 Concentrator 3.5.1 Cisco VPN 3000 Concentrator 3.5 (Rel) Cisco VPN 3000 Concentrator 3.1.4 Cisco VPN 3000 Concentrator 3.1.2 Cisco VPN 3000 Concentrator 3.1.1 Cisco VPN 3000 Concentrator 3.1 (Rel) Cisco VPN 3000 Concentrator 3.1 Cisco VPN 3000 Concentrator 3.0.4 Cisco VPN 3000 Concentrator 3.0.3 (B) Cisco VPN 3000 Concentrator 3.0.3 (A) Cisco VPN 3000 Concentrator 3.0 Cisco VPN 3000 Concentrator 2.5.2 (F) Cisco VPN 3000 Concentrator 2.5.2 (D) Cisco VPN 3000 Concentrator 2.5.2 (C) Cisco VPN 3000 Concentrator 2.5.2 (B) Cisco VPN 3000 Concentrator 2.5.2 (A) Cisco VPN 3000 Concentrator 2.0 Cisco PIX Firewall 6.3.3 (133) Cisco PIX Firewall 6.2.3 (110) Cisco PIX Firewall 6.1.5 (104) Cisco ONS 15454 Optical Transport Platform 4.14 Cisco ONS 15327 4.14 Cisco MDS 9000 1.3 (4a) Cisco Local Director 4.2 (6) Cisco Local Director 4.2 (5) Cisco Local Director 4.2 (4) Cisco Local Director 4.2 (3) Cisco Local Director 4.2 (2) Cisco Local Director 4.2 (1) Cisco IOS 12.3(6) Cisco IOS 12.2JA Cisco IOS 12.2(23) Cisco IOS 12.2(22)S Cisco IOS 12.0(5)XN1 Cisco IOS 12.0(28) Cisco IOS 12.0(27)S Cisco FWSM for Cisco Catalyst 6500/7600 Series 1.1 (3.17) Cisco FWSM for Cisco Catalyst 6500/7600 Series Cisco CSS11500 Content Services Switch 7.30 (00.09)S Cisco CSS11500 Content Services Switch 7.30 (00.08)S Cisco CSS11500 Content Services Switch 7.20 (03.10)S Cisco CSS11500 Content Services Switch 7.20 (03.09)S Cisco CSS11500 Content Services Switch 7.10 (05.07)S Cisco Catalyst 6500 Series SSL Services Module 2.1 (2) Cisco Catalyst 2820 9.0 0.07 Cisco Catalyst 1900 9.0 0.07 Avaya CMS R17 R4 Avaya CMS R16.3 R7 AlienVault AlienVault 5.1 |
Discussion
Multiple Vendor TCP Sequence Number Approximation Vulnerability
A vulnerability in TCP implementations may permit unauthorized remote users to reset TCP sessions. This issue affects products released by multiple vendors. Exploiting this issue may permit remote attackers to more easily approximate TCP sequence numbers.
The problem is that affected implementations will accept TCP sequence numbers within a certain range of the expected sequence number for a packet in the session. This will permit a remote attacker to inject a SYN or RST packet into the session, causing it to be reset and effectively allowing denial-of-service attacks. An attacker would exploit this issue by sending a packet to a receiving implementation with an approximated sequence number and a forged source IP and TCP port.
Few factors may present viable target implementations, such as imlementations that:
- depend on long-lived TCP connections
- have known or easily guessed IP address endpoints
- have known or easily guessed TCP source ports.
Note that Border Gateway Protocol (BGP) is reported to be particularly vulnerable to this type of attack. As a result, this issue is likely to affect a number of routing platforms.
Note also that while a number of vendors have confirmed this issue in various products, investigations are ongoing and it is likely that many other vendors and products will turn out to be vulnerable as the issue is investigated further.
Other consequences may also result from this issue, such as injecting specific data in TCP sessions, but this has not been confirmed.
**Update: Microsoft platforms are also reported prone to this vulnerability. Vendor reports indicate that an attacker will require knowledge of the IP address and port numbers of the source and destination of an existent legitimate TCP connection in order to exploit this vulnerability on Microsoft platforms. Connections that involve persistent sessions, for example Border Gateway Protocol sessions, may be more exposed to this vulnerability than other TCP/IP sessions.
A vulnerability in TCP implementations may permit unauthorized remote users to reset TCP sessions. This issue affects products released by multiple vendors. Exploiting this issue may permit remote attackers to more easily approximate TCP sequence numbers.
The problem is that affected implementations will accept TCP sequence numbers within a certain range of the expected sequence number for a packet in the session. This will permit a remote attacker to inject a SYN or RST packet into the session, causing it to be reset and effectively allowing denial-of-service attacks. An attacker would exploit this issue by sending a packet to a receiving implementation with an approximated sequence number and a forged source IP and TCP port.
Few factors may present viable target implementations, such as imlementations that:
- depend on long-lived TCP connections
- have known or easily guessed IP address endpoints
- have known or easily guessed TCP source ports.
Note that Border Gateway Protocol (BGP) is reported to be particularly vulnerable to this type of attack. As a result, this issue is likely to affect a number of routing platforms.
Note also that while a number of vendors have confirmed this issue in various products, investigations are ongoing and it is likely that many other vendors and products will turn out to be vulnerable as the issue is investigated further.
Other consequences may also result from this issue, such as injecting specific data in TCP sessions, but this has not been confirmed.
**Update: Microsoft platforms are also reported prone to this vulnerability. Vendor reports indicate that an attacker will require knowledge of the IP address and port numbers of the source and destination of an existent legitimate TCP connection in order to exploit this vulnerability on Microsoft platforms. Connections that involve persistent sessions, for example Border Gateway Protocol sessions, may be more exposed to this vulnerability than other TCP/IP sessions.
Exploit / POC
Multiple Vendor TCP Sequence Number Approximation Vulnerability
The proof-of-concept code developed by Paul Watson is available (SlippingInTheWindow.tgz).
The researchers who discovered this issue have demonstrated that it is exploitable on some implementations.
The following exploit script for this issue has been provided:
http://www.k-otik.com/exploits/04222004.reset.dpr.php
A Perl script targetting BGP specifically is also available (bgp-dosv2.pl).
A Perl exploit was released (Kreset.pl).
Exploit code written by Matt Edman has been released (autoRST.c).
The proof-of-concept code developed by Paul Watson is available (SlippingInTheWindow.tgz).
The researchers who discovered this issue have demonstrated that it is exploitable on some implementations.
The following exploit script for this issue has been provided:
http://www.k-otik.com/exploits/04222004.reset.dpr.php
A Perl script targetting BGP specifically is also available (bgp-dosv2.pl).
A Perl exploit was released (Kreset.pl).
Exploit code written by Matt Edman has been released (autoRST.c).
Solution / Fix
Multiple Vendor TCP Sequence Number Approximation Vulnerability
Solution:
Please see the referenced advisories for more information on obtaining and applying fixes.
Microsoft Windows XP Professional
Microsoft Windows Server 2003 Datacenter Edition Itanium 0
Microsoft Windows XP Professional x64 Edition
Solution:
Please see the referenced advisories for more information on obtaining and applying fixes.
Microsoft Windows XP Professional
-
Microsoft Security Update for Windows XP (KB893066)
http://www.microsoft.com/downloads/details.aspx?familyid=81049A86-6F39 -4A27-A643-391262785CF3&displaylang=en
Microsoft Windows Server 2003 Datacenter Edition Itanium 0
-
Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB922819)
http://www.microsoft.com/downloads/details.aspx?familyid=12515d47-134d -4d1f-9ae7-f0a7167ec424 -
Microsoft Security Update for Windows Server 2003 64-bit Edition and Windows XP 64-bit Edition, Version 20
http://www.microsoft.com/downloads/details.aspx?familyid=AC019224-82BE -4263-B977-02D4DC6C9FF6&displaylang=en
Microsoft Windows XP Professional x64 Edition
-
Microsoft Security Update for Windows XP x64 Edition (KB922819)
http://www.microsoft.com/downloads/details.aspx?familyid=fc98f55c-520e -4a68-a3c3-0df51c6122bb
References
Multiple Vendor TCP Sequence Number Approximation Vulnerability
References:
References:
- announce_en_20040421_01 : TCP protocol vulnerability in SEIL series products (SEIL)
- ASA-2005-097 SCO UnixWare TCP connection reset vulnerability - (SCOSA-2005.14) (Avaya)
- Avaya security advisory ASA-2006-217 (Avaya)
- Cisco Security Advisory: TCP Vulnerabilities in Multiple IOS-Based Cisco Product (Cisco)
- Cisco Security Advisory: TCP Vulnerabilities in Multiple Non-IOS Cisco Products (Cisco)
- IY55949: SECURITY: TCP CONNECTIONS MAY BE RESET CAUSING A DOS (IBM)
- IY55950: SECURITY: TCP CONNECTIONS MAY BE RESET CAUSING A DOS (IBM)
- IY62006: SECURITY: TCP CONNECTIONS MAY BE RESET CAUSING A DOS (IBM)
- Microsoft Security Bulletin MS05-019 (Microsoft)
- Microsoft Security Bulletin MS06-064 (Microsoft)
- Multiple Vendor TCP Denial of Service Vulnerability (Internet Security Systems)
- NISCC Vulnerability Advisory 236929 (NISCC)
- Security Advisory: TCP Vulnerability CAN-2004-0230 (Blue Coat Systems)
- SYM05-008 - Symantec security gateway ICMP potential Denial of Service (Symantec)
- TA04-111A Vulnerabilities in TCP (US-CERT)
- TCP protocol vulnerable to spoofed packets (NISCC/TCP/236929) (Juniper Networks)
- TCP RFC Alert (Check Point Software)
- Denial of Service in TCP packet processing (FreeBSD)
- McAfee Security Bulletin �?? Network Data Loss Prevention addresses 17 security is (McAfee)
- Oracle Critical Patch Update Advisory - January 2015 Oracle Advisory (Oracle)
- Oracle Solaris Critical Patch Update CVE-2004-0230 (Avaya)
- Security Advisory - AlienVault v5.1 addresses 6 vulnerabilities (AlenVault)