National Cyber-Alert System

Vulnerability Summary for CVE-2005-3774

Overview

Cisco PIX 6.3 and 7.0 allows remote attackers to cause a denial of service (blocked new connections) via spoofed TCP packets that cause the PIX to create embryonic connections that that would not produce a valid connection with the end system, including (1) SYN packets with invalid checksums, which do not result in a RST; or, from an external interface, (2) one byte of "meaningless data," or (3) a TTL that is one less than needed to reach the internal destination.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Vulnerability Note: VU#853540

Name: VU#853540

Hyperlink:http://www.kb.cert.org/vuls/id/853540

External Source: XF

Name: cisco-pix-ttl-dos(25079)

Hyperlink:http://xforce.iss.net/xforce/xfdb/25079

External Source: XF

Name: cisco-pix-tcp-data-field-dos(25077)

Hyperlink:http://xforce.iss.net/xforce/xfdb/25077

External Source: BID

Name: 15525

Hyperlink:http://www.securityfocus.com/bid/15525

External Source: BUGTRAQ

Name: 20060307 RE: Cisco PIX embryonic state machine 1b data DoS

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/427041/100/0/threaded

External Source: BUGTRAQ

Name: 20060307 Cisco PIX embryonic state machine TTL(n-1) DoS

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/426991/100/0/threaded

External Source: BUGTRAQ

Name: 20060307 Cisco PIX embryonic state machine 1b data DoS

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/426989/100/0/threaded

External Source: BUGTRAQ

Name: 20051122 Cisco PIX TCP Connection Prevention

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/417458/30/0/threaded

External Source: OSVDB

Name: 24140

Hyperlink:http://www.osvdb.org/24140

External Source: VUPEN

Name: ADV-2005-2546

Hyperlink:http://www.frsirt.com/english/advisories/2005/2546

External Source: CISCO

Name: 20051128 Response to Cisco PIX TCP Connection Prevention

Hyperlink:http://www.cisco.com/warp/public/707/cisco-response-20051122-pix.shtml

External Source: CONFIRM

Name: http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_security_notice09186a0080624a37.html

Hyperlink:http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_security_notice09186a0080624a37.html

External Source: SECTRACK

Name: 1015256

Hyperlink:http://securitytracker.com/id?1015256

External Source: SECUNIA

Name: 17670

Hyperlink:http://secunia.com/advisories/17670

External Source: FULLDISC

Name: 20051122 Cisco PIX TCP Connection Prevention

Hyperlink:http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/038983.html

External Source: FULLDISC

Name: 20051122 Cisco PIX TCP Connection Prevention

Type: Advisory

Hyperlink:http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/038971.html