CVE-2001-1244
Multiple TCP implementations could allow remote attackers to cause a denial of service (bandwidth and CPU exhaustion) by setting the maximum segment size (MSS) to a very small number and requesting large amounts of data, which generates more packets with less TCP-level data that amplify network traffic and consume more server CPU to process.
- Score
- CVSS 2.0 5.0 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2001-07-07
- Last modified
- 2024-08-08
Affected products
- Freebsd (Freebsd)
- Hp-ux (Hp)
- Vvos (Hp)
- Linux Kernel (Linux)
- Windows 2000 (Microsoft)
- Windows Nt (Microsoft)
- Netbsd (Netbsd)
- Openbsd (Openbsd)
- Sunos (Sun)
References
- http://www.securityfocus.com/archive/1/195457
- http://www.securityfocus.com/bid/2997
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6824