CVE-2005-1184

The TCP/IP stack in multiple operating systems allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet with the correct sequence number but the wrong Acknowledgement number, which generates a large number of "keep alive" packets. NOTE: some followups indicate that this issue could not be replicated.

Affected products

Windows 2000, Windows Server 2003, Windows 98Se, Windows Nt, Windows Xp

Microsoft Windows 2000

All versions

Microsoft Windows 2003 Server

= datacenter_64-bit, enterprise, enterprise_64-bit, R2, standard, standard_64-bit, web

Microsoft Windows 98se

All versions

Microsoft Windows Nt

= 4.0

Microsoft Windows Xp

All versions

CVSS 2.0

5.0 MEDIUM

EPSS

32.7% (98th percentile)

NVD status

Modified

Published

2005-04-19