TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP.
CVSS 2.0
Severity: MEDIUM
Problem Type: NVD-CWE-Other,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| xinuos | openserver | 5.0.6 |
| mcafee | network_data_loss_prevention | 9.2.1 |
| juniper | junos | 13.3 |
| mcafee | network_data_loss_prevention | 9.2.2 |
| netbsd | netbsd | 1.6 |
| microsoft | windows_2000 | - |
| netbsd | netbsd | 1.5.1 |
| juniper | junos | 12.1x47 |
| juniper | junos | 12.1r |
| juniper | junos | 12.1 |
| juniper | junos | 12.3 |
| juniper | junos | 13.1 |
| mcafee | network_data_loss_prevention | * |
| microsoft | windows_xp | - |
| xinuos | unixware | 7.1.1 |
| netbsd | netbsd | 1.6.1 |
| juniper | junos | * |
| juniper | junos | 12.2 |
| netbsd | netbsd | 1.5.2 |
| microsoft | windows_server_2003 | - |
| juniper | junos | 11.4x27 |
| netbsd | netbsd | 1.5 |
| netbsd | netbsd | 2.0 |
| microsoft | windows_98se | - |
| juniper | junos | 12.1x45 |
| juniper | junos | 12.1x46 |
| oracle | solaris | 11 |
| mcafee | network_data_loss_prevention | 9.2.0 |
| microsoft | windows_98 | - |
| juniper | junos | 11.4 |
| xinuos | openserver | 5.0.7 |
| openpgp | openpgp | 2.6.2 |
| juniper | junos | 12.1x44 |
| netbsd | netbsd | 1.6.2 |
| juniper | junos | 13.2 |
| juniper | junos | 11.4r13 |
| oracle | solaris | 10 |
| xinuos | unixware | 7.1.3 |
| netbsd | netbsd | 1.5.3 |