Multiple Vendor TCP Acknowledgements Remote Denial Of Service Vulnerability
BID:15468
CVE-2005-3675 |Info
Multiple Vendor TCP Acknowledgements Remote Denial Of Service Vulnerability
| Bugtraq ID: | 15468 |
| Class: | Design Error |
| CVE: |
CVE-2005-3675 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 16 2005 12:00AM |
| Updated: | Nov 16 2005 12:00AM |
| Credit: | Rob Sherwood of the University of Maryland reported this issue, and researched its associated exploitation methods. Stefan Savage, Neal Cardwell, David Wetherall, and Tom Anderson published information on the underlying protocol issue. |
| Vulnerable: |
IETF RFC 793: TCP |
| Not Vulnerable: | |
Discussion
Multiple Vendor TCP Acknowledgements Remote Denial Of Service Vulnerability
Multiple vendors are susceptible to a remote TCP acknowledgement denial of service vulnerability.
This issue presents itself when the remote peer forges acknowledgment packets prior to actually receiving packets from the sending host. As soon as the server receives an acknowledgment for a packet that has been sent, it assumes that the client has received it. These acknowledgment packets influence the servers congestion control mechanism.
This vulnerability allows remote attackers to consume excessive network resources, denying network service to legitimate users.
This issue exists in the TCP protocol specification as defined by RFC 793. However, it is likely that a number of specific vendor implementations will also be affected. This BID will be updated as individual implementations of the protocol are reported to be affected.
Multiple vendors are susceptible to a remote TCP acknowledgement denial of service vulnerability.
This issue presents itself when the remote peer forges acknowledgment packets prior to actually receiving packets from the sending host. As soon as the server receives an acknowledgment for a packet that has been sent, it assumes that the client has received it. These acknowledgment packets influence the servers congestion control mechanism.
This vulnerability allows remote attackers to consume excessive network resources, denying network service to legitimate users.
This issue exists in the TCP protocol specification as defined by RFC 793. However, it is likely that a number of specific vendor implementations will also be affected. This BID will be updated as individual implementations of the protocol are reported to be affected.
Exploit / POC
Multiple Vendor TCP Acknowledgements Remote Denial Of Service Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Multiple Vendor TCP Acknowledgements Remote Denial Of Service Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Multiple Vendor TCP Acknowledgements Remote Denial Of Service Vulnerability
References:
References: