The SynAttackProtect protection in Microsoft Windows 2003 before SP1 and Windows 2000 before SP4 with Update Roll-up uses a hash of predictable data, which allows remote attackers to cause a denial of service (CPU consumption) via a flood of SYN packets that produce identical hash values, which slows down the hash table lookups.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Windows_2003_server | Microsoft | web | web |
Windows_2003_server | Microsoft | enterprise | enterprise |
Windows_2000 | Microsoft | * | * |
Windows_2000 | Microsoft | * | * |
Windows_2000 | Microsoft | * | * |
Windows_2000 | Microsoft | * | * |
Windows_2003_server | Microsoft | standard | standard |
Windows_2003_server | Microsoft | r2 | r2 |
Windows_2000 | Microsoft | * | * |