FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2004-0171

This CVE name corresponds to:

Entered	Topic
2004-04-07	many out-of-sequence TCP packets denial-of-service

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2004-0171 at cve.mitre.org

Details

Type	CVE Entry
Name	CVE-2004-0171

Description

FreeBSD 5.1 and earlier, and Mac OS X before 10.3.4, allows remote attackers to cause a denial of service (resource exhaustion of memory buffers and system crash) via a large number of out-of-sequence TCP packets, which prevents the operating system from creating new connections.

References

Source	Reference
IDEFENSE	20040302 FreeBSD Memory Buffer Exhaustion Denial of Service Vulnerability
APPLE	APPLE-SA-2004-05-28
FREEBSD	FreeBSD-SA-04:04
CERT-VN	VU#395670
BID	9792
XF	freebsd-mbuf-dos(15369)
OSVDB	4124