CVE-2004-0791

Multiple TCP/IP and ICMP implementations - DoS

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2004-0791. PoCs published by Fernando Gont.

AI-analyzed exploit summary This is a writeup describing multiple ICMP-based denial-of-service vulnerabilities (CVE-2004-0791, CVE-2004-0790, CVE-2004-1060) affecting various TCP/IP implementations. It explains blind connection-reset, ICMP Source Quench, and PMTUD attacks but does not include executable exploit code.

Description

Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via a blind throughput-reduction attack using spoofed Source Quench packets, aka the "ICMP Source Quench attack." NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Fernando Gont · textdosmultiple
https://www.exploit-db.com/exploits/25387

This is a writeup describing multiple ICMP-based denial-of-service vulnerabilities (CVE-2004-0791, CVE-2004-0790, CVE-2004-1060) affecting various TCP/IP implementations. It explains blind connection-reset, ICMP Source Quench, and PMTUD attacks but does not include executable exploit code.

Classification
Writeup 90%
Attack Type
Dos
Complexity
Moderate
Reliability
Theoretical
Target: Multiple vendor TCP/IP implementations (including Microsoft)
No auth needed
Prerequisites: Network access to target · Ability to forge ICMP packets
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (24)

Core 24
Core References
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1112
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A184
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/13124
Third Party Advisory, VDB Entry vendor-advisory x_refsource_hp
http://www.securityfocus.com/archive/1/418882/100/0/threaded
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2005-017.html
Third Party Advisory, VDB Entry vendor-advisory x_refsource_fedora
http://www.securityfocus.com/archive/1/428058/100/0/threaded
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2005-016.html
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10228
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2005-043.html
Mailing List vendor-advisory x_refsource_hp
http://marc.info/?l=bugtraq&m=112861397904255&w=2
Vendor Advisory vendor-advisory x_refsource_sunalert
http://sunsolve.sun.com/search/document.do?assetkey=1-26-57746-1
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A596
Vendor Advisory vendor-advisory x_refsource_sunalert
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101658-1
Various Sources vendor-advisory x_refsource_sco
ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.4/SCOSA-2006.4.txt
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18317
Third Party Advisory, VDB Entry vendor-advisory x_refsource_fedora
http://www.securityfocus.com/archive/1/428028/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A464
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A726
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A688
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/19
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/57

Scores

EPSS 0.2032
EPSS Percentile 97.2%

Details

Status published
Products (4)
sun/solaris 9.0
sun/solaris 10.0
sun/sunos 5.7
sun/sunos 5.8
Published Apr 12, 2005
Tracked Since Feb 18, 2026