CVE-2004-0230
Juniper Junos - Denial of Service via TCP RST Packet Injection
Title source: llmExploitation Summary
EIP tracks 7 public exploits for CVE-2004-0230. PoCs published by K-sPecial, Paul A. Watson, Aphex.
AI-analyzed exploit summary This Perl script exploits CVE-2004-0230 by sending crafted TCP RST packets with approximated sequence numbers to reset established TCP sessions. It iterates through a range of sequence numbers and ports to increase the likelihood of a successful reset.
Description
TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP.
Exploits (7)
This Perl script exploits CVE-2004-0230 by sending crafted TCP RST packets with approximated sequence numbers to reset established TCP sessions. It iterates through a range of sequence numbers and ports to increase the likelihood of a successful reset.
This exploit code crafts and sends TCP RST packets to disrupt established TCP connections by guessing sequence numbers. It uses libnet to construct raw Ethernet, IP, and TCP packets with spoofed source/destination MAC and IP addresses.
This Delphi program crafts and sends TCP RST packets to forcibly terminate established TCP connections. It allows customization of source/destination IP/port, window size, and sequence numbers to disrupt targeted connections.
The document describes a TCP sequence number approximation vulnerability (CVE-2004-0230) that allows remote attackers to reset TCP sessions by injecting SYN or RST packets with forged source IP/port and approximated sequence numbers. It highlights the impact on long-lived connections like BGP and mentions ongoing investigations into affected vendors.
This Perl script exploits CVE-2004-0230 by sending a flood of TCP RST packets to disrupt BGP connections. It leverages predictable sequence numbers and source ports to forge packets, targeting long-lived TCP sessions.
This exploit demonstrates a TCP session reset vulnerability (CVE-2004-0230) by sniffing network traffic and forging RST packets to terminate active TCP connections. It leverages WinPCAP to capture packets and craft malicious RST packets with approximated sequence numbers.
This exploit demonstrates a DoS vulnerability in Windows by crafting a malformed IP packet with an option size of 39, causing an off-by-one error. The PoC uses libnet to construct and send the packet, triggering a crash in the target system.