CVE-2005-3945

The SynAttackProtect protection in Microsoft Windows 2003 before SP1 and Windows 2000 before SP4 with Update Roll-up uses a hash of predictable data, which allows remote attackers to cause a denial of service (CPU consumption) via a flood of SYN packets that produce identical hash values, which slows down the hash table lookups.

Score

CVSS 2.0 7.8 High

Status

Modified - cve@mitre.org

Published

2005-12-01

Last modified

2024-08-07

Affected products

• Windows 2000 (Microsoft)
• Windows 2003 Server (Microsoft)

References

• http://www.securityfocus.com/archive/1/417952/100/0/threaded
• http://www.securityfocus.com/bid/15613