Description:
Several vulnerabilities were reported in various TCP stack implementations. A remote user can cause denial of service conditions. Multiple vendors and products are affected.
A remote user can send specially crafted data to cause denial of service conditions on the target TCP connection queue.
Published reports indicate that a TCP connection must be established with the target system to exploit these vulnerabilities and that the vulnerabilities are based on weaknesses in the TCP protocol.
Robert E. Lee and Jack Louis of Outpost24 reported these vulnerabilities.
The vulnerabilities were publicly referenced in August 2008 in a blog posting:
[Editor's note: This Alert is a placeholder to document the overall vendor community investigation of these vulnerabilities. As vendors and researchers confirm which specific products are affected, separate Alerts will be issued for each affected product.]
Impact:
A remote user can cause denial of service conditions.
Solution:
No solution was available at the time of this entry.
Source Message Contents