CVE Vulnerabilities

CVE-2005-3945

Published: Dec 01, 2005 | Modified: Apr 30, 2019
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.8 HIGH
AV:N/AC:L/Au:N/C:N/I:N/A:C
RedHat/V2
RedHat/V3
Ubuntu

The SynAttackProtect protection in Microsoft Windows 2003 before SP1 and Windows 2000 before SP4 with Update Roll-up uses a hash of predictable data, which allows remote attackers to cause a denial of service (CPU consumption) via a flood of SYN packets that produce identical hash values, which slows down the hash table lookups.

Affected Software

Name Vendor Start Version End Version
Windows_2000 Microsoft * *
Windows_2003_server Microsoft enterprise (including) enterprise (including)
Windows_2003_server Microsoft r2 (including) r2 (including)
Windows_2003_server Microsoft standard (including) standard (including)
Windows_2003_server Microsoft web (including) web (including)

References