CVE-2005-0688
Windows Server 2003 and XP SP2 - Denial of Service via Land Attack
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2005-0688. PoCs published by Yuri Gushin.
AI-analyzed exploit summary This exploit targets a Windows IP stack vulnerability (CVE-2005-0688) by crafting a malformed IP packet with an option size of 39, causing a denial-of-service (DoS) due to an off-by-one error. The PoC uses libnet to construct and send the packet.
Description
Windows Server 2003 and XP SP2, with Windows Firewall turned off, allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet with the SYN flag set and the same destination and source address and port, aka a reoccurrence of the "Land" vulnerability (CVE-1999-0016).
Exploits (2)
This exploit targets a Windows IP stack vulnerability (CVE-2005-0688) by crafting a malformed IP packet with an option size of 39, causing a denial-of-service (DoS) due to an off-by-one error. The PoC uses libnet to construct and send the packet.
This is a functional remote DoS exploit for CVE-2005-0688 targeting Windows Server 2003 and XP SP2. It crafts a malformed TCP SYN packet with specific flags to trigger a denial-of-service condition.