Unscored severity · published Nov 23, 2005
CVE-2005-3774
Cisco PIX 6.3 and 7.0 allows remote attackers to cause a denial of service (blocked new connections) via spoofed TCP packets that cause the PIX to create embryonic connections…
–
CVSS
18.2%
EPSS
No
On KEV
Description
Cisco PIX 6.3 and 7.0 allows remote attackers to cause a denial of service (blocked new connections) via spoofed TCP packets that cause the PIX to create embryonic connections that that would not produce a valid connection with the end system, including (1) SYN packets with invalid checksums, which do not result in a RST; or, from an external interface, (2) one byte of "meaningless data," or (3) a TTL that is one less than needed to reach the internal destination.
Exploitation
Is it being used?
Exploit prediction (EPSS)18.2% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PI
Pix · Cisco
6.3; 7.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-3774
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-3774
Vendor Advisory
http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/038971.html
lists.grok.org.uk
http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/038983.html
secunia.com
http://secunia.com/advisories/17670
securitytracker.com
http://securitytracker.com/id?1015256
www.cisco.com
http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_security_notice09186a0080624a37.html
www.cisco.com
http://www.cisco.com/warp/public/707/cisco-response-20051122-pix.shtml
More from Pix
–
CVE-2009-1160
Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0(8)1, 7.1 before 7.1(2)74, 7.2 before 7.2(4)9, and 8.0 before 8.0(4)5 do not…
–
CVE-2009-1159
Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.2 before 7.2(4)26, 8.0 before 8.0(4)22, and 8.1 before 8.1(2)12,…
–
CVE-2009-1158
Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series devices 7.0 before 7.0(8)6, 7.1 before 7.1(2)82, 7.2 before 7.2(4)26, 8.0 before 8.0(4)24, and…
–
CVE-2009-1157
Memory leak on Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0(8)6, 7.1 before 7.1(2)82, 7.2 before 7.2(4)30, 8.0 before 8.0(4)28,…
–
CVE-2009-1156
Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series devices 8.0 before 8.0(4)25 and 8.1 before 8.1(2)15, when an SSL VPN or ASDM access is…