← back
CVE-2004-0790

CVE-2004-0790

45Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 80%
from disclosure to weapon0 days
Published on NVDApr 13
1st PoCApr 12
exploitation probability
80%top 1% of all CVEs
observed exploitation
nono source reports it
3 public exploit(s)
Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (reset TCP connections) via spoofed ICMP error messages, aka the "blind connection-reset attack." NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.
Affected products
n/a · n/a
public PoCs found — 3✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/948exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/25389exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/942
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.4/SCOSA-2006.4.txthttp://marc.info/?l=bugtraq&m=112861397904255&w=2https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-019https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-064http://secunia.com/advisories/18317http://secunia.com/advisories/22341http://securityreason.com/securityalert/19http://securityreason.com/securityalert/57https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1177https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A176https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1910https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A211