CVE-2008-4609
BSD and Cisco IOS - Denial of Service via TCP State Table Manipulation
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-4609. PoCs published by mrclki.
AI-analyzed exploit summary This repository contains a functional Go implementation of the Sockstress (CVE-2008-4609) denial-of-service attack. It crafts and sends malformed TCP packets to exploit a vulnerability in TCP stack implementations, causing resource exhaustion on the target system.
Description
The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cause a denial of service (connection queue exhaustion) via multiple vectors that manipulate information in the TCP state table, as demonstrated by sockstress.
Exploits (1)
This repository contains a functional Go implementation of the Sockstress (CVE-2008-4609) denial-of-service attack. It crafts and sends malformed TCP packets to exploit a vulnerability in TCP stack implementations, causing resource exhaustion on the target system.