CVE-2004-0744

Mac OS X - Denial of Service via Rose Attack IP Fragment Handling

Title source: llm
STIX 2.1

Description

The TCP/IP Networking component in Mac OS X before 10.3.5 allows remote attackers to cause a denial of service (memory and resource consumption) via a "Rose Attack" that involves sending a subset of small IP fragments that do not form a complete, larger packet.

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/16946
Various Sources vendor-advisory x_refsource_apple
http://www.auscert.org.au/render.html?it=4291
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=108075899619193&w=2
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=108308604119618&w=2

Scores

EPSS 0.0160
EPSS Percentile 73.4%

Details

Status published
Products (28)
apple/mac_os_x 10.2
apple/mac_os_x 10.2.1
apple/mac_os_x 10.2.2
apple/mac_os_x 10.2.3
apple/mac_os_x 10.2.4
apple/mac_os_x 10.2.5
apple/mac_os_x 10.2.6
apple/mac_os_x 10.2.7
apple/mac_os_x 10.2.8
apple/mac_os_x 10.3
... and 18 more
Published Nov 23, 2004
Tracked Since Feb 18, 2026