Multiple TCP implementations could allow remote attackers to cause a denial of service (bandwidth and CPU exhaustion) by setting the maximum segment size (MSS) to a very small number and requesting large amounts of data, which generates more packets with less TCP-level data that amplify network traffic and consume more server CPU to process.
References
Link | Resource |
---|---|
http://www.securityfocus.com/bid/2997 | Exploit Vendor Advisory |
http://www.securityfocus.com/archive/1/195457 | |
https://exchange.xforce.ibmcloud.com/vulnerabilities/6824 |
Configurations
Configuration 1 (hide)
|
Information
Published : 2001-07-06 21:00
Updated : 2018-10-30 09:26
NVD link : CVE-2001-1244
Mitre link : CVE-2001-1244
JSON object : View
CWE
Products Affected
netbsd
- netbsd
microsoft
- windows_nt
- windows_2000
freebsd
- freebsd
hp
- vvos
- hp-ux
linux
- linux_kernel
sun
- sunos
openbsd
- openbsd