Vulnerability in Microsoft Windows 2003 Server
CVE-2005-1649
The IPv6 support in Windows XP SP2, 2003 Server SP1, and Longhorn, with Windows Firewall turned off, allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet with the SYN flag set and the same destination and source address and port, a variant of CVE-2005-0688 and a reoccurrence of the "Land" vulnerability (CVE-1999-0016).
EPSS: 0.218 (97.4th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Windows_2003_server — versions datacenter_64-bit, enterprise, enterprise_64-bit
- Microsoft Windows_xp
- N/a — versions n/a
References
- cve@mitre.org (Vendor Advisory, mailing-list, Exploit, x_refsource_NTBUGTRAQ)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN)
- cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)