CVE Vulnerabilities

CVE-2001-1244

Published: Jul 07, 2001 | Modified: Oct 30, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu

Multiple TCP implementations could allow remote attackers to cause a denial of service (bandwidth and CPU exhaustion) by setting the maximum segment size (MSS) to a very small number and requesting large amounts of data, which generates more packets with less TCP-level data that amplify network traffic and consume more server CPU to process.

Affected Software

Name Vendor Start Version End Version
Freebsd Freebsd 4.3 4.3
Hp-ux Hp 11.00 11.00
Hp-ux Hp 11.0.4 11.0.4
Hp-ux Hp 11.11 11.11
Vvos Hp 11.04 11.04
Linux_kernel Linux 2.4.0 2.4.0
Linux_kernel Linux 2.4.1 2.4.1
Linux_kernel Linux 2.4.2 2.4.2
Linux_kernel Linux 2.4.3 2.4.3
Linux_kernel Linux 2.4.4 2.4.4
Linux_kernel Linux 2.4.5 2.4.5
Windows_2000 Microsoft * *
Windows_2000 Microsoft * *
Windows_2000 Microsoft * *
Windows_nt Microsoft 4.0 4.0
Windows_nt Microsoft 4.0 4.0
Windows_nt Microsoft 4.0 4.0
Windows_nt Microsoft 4.0 4.0
Windows_nt Microsoft 4.0 4.0
Windows_nt Microsoft 4.0 4.0
Windows_nt Microsoft 4.0 4.0
Windows_nt Microsoft 4.0 4.0
Netbsd Netbsd 1.5 1.5
Netbsd Netbsd 1.5.1 1.5.1
Openbsd Openbsd 2.8 2.8
Openbsd Openbsd 2.9 2.9
Sunos Sun 5.5.1 5.5.1
Sunos Sun 5.7 5.7
Sunos Sun 5.8 5.8

References