CVE-2005-0740

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

The TCP stack (tcp_input.c) in OpenBSD 3.5 and 3.6 allows remote attackers to cause a denial of service (system panic) via crafted values in the TCP timestamp option, which causes invalid arguments to be used when calculating the retransmit timeout.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/13819
http://securitytracker.com/id?1012861Patch, Vendor Advisory
http://www.openbsd.org/errata35.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/12250Exploit, Patch, Vendor Advisory
http://secunia.com/advisories/13819
http://securitytracker.com/id?1012861Patch, Vendor Advisory
http://www.openbsd.org/errata35.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/12250Exploit, Patch, Vendor Advisory

Timeline

Published: Jan 13, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-07414.3Cross-site scripting (XSS) vulnerability in YaBB.pl for YaBB 2.0 RC1 allows remote attackers to inject arbitrary web script or HTML via the CVE-2005-07424.3Cross-site scripting (XSS) vulnerability in Sun Java System Application Server 7 allows remote attackers to inject arbitrary web script or H CVE-2005-07437.5The custom avatar uploading feature (uploader.php) for XOOPS 2.0.9.2 and earlier allows remote attackers to upload arbitrary PHP scripts, wh CVE-2005-074410.0The web GUI for Novell iChain 2.2 and 2.3 SP2 and SP3 allows attackers to hijack sessions and gain administrator privileges by (1) sniffing CVE-2005-07454.6UTStarcom iAN-02EX VoIP Analog Terminal Adaptor (ATA) allows local users to bypass ATA access restrictions by dialing "*#26845#" and causing CVE-2005-07465.0The Mini FTP server in Novell iChain 2.2 and 2.3 SP2 and earlier allows remote unauthenticated attackers to obtain the full path of the serv CVE-2005-07475.0ApplyYourself i-Class allows remote attackers to obtain sensitive information about their own applications by reusing the hidden ID field, a CVE-2005-07487.5PHP remote file inclusion vulnerability in initdb.php for WEBInsta Mailing list manager 1.3d allows remote attackers to execute arbitrary PH CVE-2005-07497.2The load_elf_library in the Linux kernel before 2.6.11.6 allows local users to cause a denial of service (kernel crash) via a crafted ELF li CVE-2005-07507.2The bluez_sock_create function in the Bluetooth stack for Linux kernel 2.4.6 through 2.4.30-rc1 and 2.6 through 2.6.11.5 allows local users CVE-2005-07527.5The Plugin Finder Service (PFS) in Firefox before 1.0.3 allows remote attackers to execute arbitrary code via a javascript: URL in the PLUGI CVE-2005-07537.5Buffer overflow in CVS before 1.11.20 allows remote attackers to execute arbitrary code.