CVE-2005-0356

Cisco Agent Desktop - Denial of Service

Title source: rule

Description

Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard later packets because they appear to be too old.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Daniel Hartmeier · cdosmultiple

https://www.exploit-db.com/exploits/1008

View Code ZIP pw:eip

References (11)

[Various Sources] ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:15.tcp.asc

[Various Sources] ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.64/SCOSA-2005.64.txt

[Patch] http://secunia.com/advisories/15417/

[Vendor Advisory] http://support.avaya.com/elmodocs2/security/ASA-2006-032.htm

[Vendor Advisory] http://www.cisco.com/warp/public/707/cisco-sn-20050518-tcpts.shtml

[Third Party Advisory, US Government Resource] http://www.kb.cert.org/vuls/id/637934

[Exploit] http://www.securityfocus.com/bid/13676

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/20635

[Third Party Advisory] http://secunia.com/advisories/15393

[Third Party Advisory] http://secunia.com/advisories/18222

[Third Party Advisory] http://secunia.com/advisories/18662

Scores

EPSS 0.8153

EPSS Percentile 99.2%

Details

Status published

Products (50)

alaxala/alaxala_networks ax5400s

alaxala/alaxala_networks ax7800r

alaxala/alaxala_networks ax7800s

cisco/agent_desktop

cisco/aironet_ap1200

cisco/aironet_ap350

cisco/call_manager 1.0

cisco/call_manager 2.0

cisco/call_manager 3.0

cisco/call_manager 3.1

... and 40 more

Published May 31, 2005

Tracked Since Feb 18, 2026