Windows Server 2003 and XP SP2, with Windows Firewall turned off, allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet with the SYN flag set and the same destination and source address and port, aka a reoccurrence of the "Land" vulnerability (CVE-1999-0016).

The remote host runs a version of Windows that has a flaw in its TCP/IP IPv6 stack.

The flaw could allow an attacker to perform a denial of service attack against the remote host.

To exploit this vulnerability, an attacker needs to send a specially crafted ICMP or TCP packet to the remote host.

The remote host runs a version of Windows that has a flaw in its TCP/IP stack.

The flaw may allow an attacker to execute arbitrary code with SYSTEM privileges on the remote host or to perform a denial of service attack against the remote host.

Proof of concept code is available to perform a denial of service attack against a vulnerable system.

The remote host runs a version of Windows that has a flaw in its TCP/IP stack.

The flaw could allow an attacker to execute arbitrary code with SYSTEM privileges on the remote host, or to perform a denial of service attack against the remote host.

Proof of concept code is available to perform a Denial of Service against a vulnerable system.

ID	Name	Product	Family	Severity
22537	MS06-064: Vulnerability in TCP/IP IPv6 Could Allow Denial of Service (922819)	Nessus	Windows : Microsoft Bulletins	medium
18028	MS05-019: Vulnerabilities in TCP/IP Could Allow Remote Code Execution (893066) (uncredentialed check)	Nessus	Windows	high
18023	MS05-019: Vulnerabilities in TCP/IP Could Allow Remote Code Execution (893066)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2005-0688

high

Tenable Plugins

medium

high

high