The TCP stack (tcp_input.c) in OpenBSD 3.5 and 3.6 allows remote attackers to cause a denial of service (system panic) via crafted values in the TCP timestamp option, which causes invalid arguments to be used when calculating the retransmit timeout.
References
Link | Resource |
---|---|
http://www.openbsd.org/errata35.html | Patch Vendor Advisory |
http://securitytracker.com/id?1012861 | Patch Vendor Advisory |
http://www.securityfocus.com/bid/12250 | Exploit Patch Vendor Advisory |
http://secunia.com/advisories/13819 |
Configurations
Configuration 1 (hide)
|
Information
Published : 2005-01-12 21:00
Updated : 2008-09-05 13:47
NVD link : CVE-2005-0740
Mitre link : CVE-2005-0740
JSON object : View
CWE
Products Affected
openbsd
- openbsd