Multiple TCP implementations could allow remote attackers to cause a denial of service (bandwidth and CPU exhaustion) by setting the maximum segment size (MSS) to a very small number and requesting large amounts of data, which generates more packets with less TCP-level data that amplify network traffic and consume more server CPU to process.
2001-07-07T04:00:00.000
2025-04-03T01:03:51.193
Deferred
CVSSv2: 5.0 (MEDIUM)
AV:N/AC:L/Au:N/C:N/I:N/A:P
10.0
2.9
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Operating System | freebsd | freebsd | 4.3 | Yes |
Operating System | hp | hp-ux | 11.00 | Yes |
Operating System | hp | hp-ux | 11.0.4 | Yes |
Operating System | hp | hp-ux | 11.11 | Yes |
Operating System | hp | vvos | 11.04 | Yes |
Operating System | linux | linux_kernel | 2.4.0 | Yes |
Operating System | linux | linux_kernel | 2.4.1 | Yes |
Operating System | linux | linux_kernel | 2.4.2 | Yes |
Operating System | linux | linux_kernel | 2.4.3 | Yes |
Operating System | linux | linux_kernel | 2.4.4 | Yes |
Operating System | linux | linux_kernel | 2.4.5 | Yes |
Operating System | microsoft | windows_2000 | * | Yes |
Operating System | microsoft | windows_2000 | * | Yes |
Operating System | microsoft | windows_2000 | * | Yes |
Operating System | microsoft | windows_nt | 4.0 | Yes |
Operating System | microsoft | windows_nt | 4.0 | Yes |
Operating System | microsoft | windows_nt | 4.0 | Yes |
Operating System | microsoft | windows_nt | 4.0 | Yes |
Operating System | microsoft | windows_nt | 4.0 | Yes |
Operating System | microsoft | windows_nt | 4.0 | Yes |
Operating System | microsoft | windows_nt | 4.0 | Yes |
Operating System | microsoft | windows_nt | 4.0 | Yes |
Operating System | netbsd | netbsd | 1.5 | Yes |
Operating System | netbsd | netbsd | 1.5.1 | Yes |
Operating System | openbsd | openbsd | 2.8 | Yes |
Operating System | openbsd | openbsd | 2.9 | Yes |
Operating System | sun | sunos | 5.5.1 | Yes |
Operating System | sun | sunos | 5.7 | Yes |
Operating System | sun | sunos | 5.8 | Yes |