CVE-2005-3774

Exploitation Summary

EIP tracks 2 public exploits for CVE-2005-3774. PoCs published by Janis Vizulis.

AI-analyzed exploit summary This Perl script exploits CVE-2005-3774, a denial-of-service (DoS) vulnerability in Cisco PIX firewalls by sending a flood of TCP SYN packets with incrementing source ports. It uses Net::RawIP to craft and send packets, targeting a specified destination IP and port.

Description

Cisco PIX 6.3 and 7.0 allows remote attackers to cause a denial of service (blocked new connections) via spoofed TCP packets that cause the PIX to create embryonic connections that that would not produce a valid connection with the end system, including (1) SYN packets with invalid checksums, which do not result in a RST; or, from an external interface, (2) one byte of "meaningless data," or (3) a TTL that is one less than needed to reach the internal destination.

Exploits (2)

exploitdb WORKING POC VERIFIED

by Janis Vizulis · perldoshardware

https://www.exploit-db.com/exploits/1338

View Code ZIP pw:eip

This Perl script exploits CVE-2005-3774, a denial-of-service (DoS) vulnerability in Cisco PIX firewalls by sending a flood of TCP SYN packets with incrementing source ports. It uses Net::RawIP to craft and send packets, targeting a specified destination IP and port.

Classification

Working Poc 90%

Attack Type

Dos

Complexity

Moderate

Reliability

Reliable

Target: Cisco PIX Firewall (versions affected by CVE-2005-3774)

No auth needed

Prerequisites: Perl with Net::RawIP, Getopt::Long, and Term::ProgressBar modules · Network access to the target · Target's MAC and IP addresses

MITRE ATT&CK

T1498 - Network Denial of Service

devstral-2 · analyzed Feb 16, 2026 Full analysis →

exploitdb WORKING POC VERIFIED

by Janis Vizulis · perldoshardware

https://www.exploit-db.com/exploits/26548

View Code ZIP pw:eip

This Perl script exploits CVE-2005-3774, a denial-of-service vulnerability in Cisco PIX firewalls by sending spoofed TCP SYN packets to block legitimate TCP connections. It uses Net::RawIP to craft and send packets with incrementing source ports to overwhelm the target.