CVE-2004-0171

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

FreeBSD 5.1 and earlier, and Mac OS X before 10.3.4, allows remote attackers to cause a denial of service (resource exhaustion of memory buffers and system crash) via a large number of out-of-sequence TCP packets, which prevents the operating system from creating new connections.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.seifried.org/pipermail/security/2004-May/003743.html
http://www.idefense.com/application/poi/display?id=78&type=vulnerabilitiesPatch, Vendor Advisory
http://www.kb.cert.org/vuls/id/395670US Government Resource
http://www.osvdb.org/4124
http://www.securityfocus.com/bid/9792Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15369
http://lists.seifried.org/pipermail/security/2004-May/003743.html
http://www.idefense.com/application/poi/display?id=78&type=vulnerabilitiesPatch, Vendor Advisory
http://www.kb.cert.org/vuls/id/395670US Government Resource
http://www.osvdb.org/4124
http://www.securityfocus.com/bid/9792Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15369

Timeline

Published: Mar 15, 2004
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2004

CVE-2004-01727.2Heap-based buffer overflow in the search_for_command function of ltrace 0.3.10, if it is installed setuid, could allow local users to execut CVE-2004-01735.0Directory traversal vulnerability in Apache 1.3.29 and earlier, and Apache 2.0.48 and earlier, when running on Cygwin, allows remote attacke CVE-2004-01747.5Apache 1.4.x before 1.3.30, and 2.0.x before 2.0.49, when using multiple listening sockets on certain platforms, allows remote attackers to CVE-2004-01754.3Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers to overwrite arbitrary files. NOTE: this CVE-2004-01765.0Multiple buffer overflows in Ethereal 0.8.13 to 0.10.2 allow remote attackers to cause a denial of service and possibly execute arbitrary co CVE-2004-01775.0The ext3 code in Linux 2.4.x before 2.4.26 does not properly initialize journal descriptor blocks, which causes an information leak in which CVE-2004-01782.1The OSS code for the Sound Blaster (sb16) driver in Linux 2.4.x before 2.4.26, when operating in 16 bit mode, does not properly handle certa CVE-2004-01796.8Multiple format string vulnerabilities in (1) neon 0.24.4 and earlier, and other products that use neon including (2) Cadaver, (3) Subversio CVE-2004-01802.6The client for CVS before 1.11 allows a remote malicious CVS server to create arbitrary files using certain RCS diff files that use absolute CVE-2004-01812.1The JFS file system code in Linux 2.4.x has an information leak in which in-memory data is written to the device for the JFS file system, wh CVE-2004-01825.0Mailman before 2.0.13 allows remote attackers to cause a denial of service (crash) via an email message with an empty subject field.CVE-2004-01835.0TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via ISAKMP packets containing a Delete payload with a