Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2005-3774

Quick assessment

Affected
n/a n/a
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Cisco PIX是一款硬件防火墙解决方案。 Cisco PIX在处理畸形的TCP连接报文时存在漏洞，远程攻击者可能利用此漏洞对合法访问源造成拒绝服务攻击。如果通过PIX防火墙发送了有错误校验和的TCP SYN报文的话，PIX就会阻断使用相同源和目标TCP端口及IP地址的新TCP连接，直到大约2分钟后才会允许新的连接。因此攻击者可以发送有错误校验和的特制TCP报文，将源/目标IP和端口设置为合法的主机。一旦PIX防火墙接收了这样的报文，就无法同恶意报文中所指定的凭据建立新的TCP会话，默认时间为2分钟2秒

AI Predicted 7.5 Difficulty: Trivial EPSS 18.21% · P97

Public Exploits 2

ExploitDB · 2 EDB-1338 [dos] EDB-26548 [dos]
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2005-3774

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Cisco PIX 6.3 and 7.0 allows remote attackers to cause a denial of service (blocked new connections) via spoofed TCP packets that cause the PIX to create embryonic connections that that would not produce a valid connection with the end system, including (1) SYN packets with invalid checksums, which do not result in a RST; or, from an external interface, (2) one byte of "meaningless data," or (3) a TTL that is one less than needed to reach the internal destination.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Cisco PIX 6.3欺骗TCP SYN报文拒绝服务漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco PIX是一款硬件防火墙解决方案。 Cisco PIX在处理畸形的TCP连接报文时存在漏洞，远程攻击者可能利用此漏洞对合法访问源造成拒绝服务攻击。如果通过PIX防火墙发送了有错误校验和的TCP SYN报文的话，PIX就会阻断使用相同源和目标TCP端口及IP地址的新TCP连接，直到大约2分钟后才会允许新的连接。因此攻击者可以发送有错误校验和的特制TCP报文，将源/目标IP和端口设置为合法的主机。一旦PIX防火墙接收了这样的报文，就无法同恶意报文中所指定的凭据建立新的TCP会话，默认时间为2分钟2秒
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2005-3774

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2005-3774

请登录查看更多情报信息。

Vendor Advisories for CVE-2005-3774 (12)

Mailing List Discussions for CVE-2005-3774 (2)

Other References for CVE-2005-3774 (2)

Same Patch Batch · n/a · 2005-11-23 · 19 CVEs total

CVE-2005-3779 HP-UX xterm本地非授权访问漏洞
CVE-2005-3773 Joomla未明漏洞
CVE-2005-3772 Joomla! 多个SQL注入漏洞
CVE-2005-3771 Joomla!多个跨站脚本漏洞
CVE-2005-3770 PHPPost多个跨站脚本漏洞
CVE-2005-3769 PHP Download Manager Files.PHP SQL注入漏洞
CVE-2005-3768 Symantec动态VPN服务IKE缓冲区溢出漏洞
CVE-2005-3531 FUSE安装选项毁坏漏洞
CVE-2005-3780 IPUpdate远程缓冲区溢出漏洞
CVE-2005-3785 EIX不安全的临时文件创建漏洞
CVE-2005-3778 MyBulletinBoard (MyBB) 未明拒绝服务漏洞
CVE-2005-3777 MyBulletinBoard (MyBB)修改私有消息漏洞
CVE-2005-3776 MyBulletinBoard (MyBB) 多个跨站脚本漏洞
CVE-2005-3775 PollVote pollvote.php PHP远程文件包含漏洞
CVE-2005-3781 Sun Solaris In.Named未明拒绝服务漏洞
CVE-2005-3784 Linux Kernel auto-reap ptraced子进程本地拒绝服务漏洞
CVE-2005-3783 Linux Kernel PTrace CLONE_THREAD本地拒绝服务漏洞
CVE-2005-3786 Novell ZENworks 远程诊断Console One未经授权的访问漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2005-3774

No comments yet

Leave a comment