CVE-2004-0744

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2004-0744
The TCP/IP Networking component in Mac OS X before 10.3.5 allows remote attackers to cause a denial of service (memory and resource consumption) via a "Rose Attack" that involves sending a subset of small IP fragments that do not form a complete, larger packet.

5.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References
Link Resource
http://digital.net/~gandalf/Rose_Frag_Attack_Explained.txt
http://marc.info/?l=bugtraq&m=108075899619193&w=2
http://marc.info/?l=bugtraq&m=108308604119618&w=2
http://www.auscert.org.au/render.html?it=4291
https://exchange.xforce.ibmcloud.com/vulnerabilities/16946
http://digital.net/~gandalf/Rose_Frag_Attack_Explained.txt
http://marc.info/?l=bugtraq&m=108075899619193&w=2
http://marc.info/?l=bugtraq&m=108308604119618&w=2
http://www.auscert.org.au/render.html?it=4291
https://exchange.xforce.ibmcloud.com/vulnerabilities/16946
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*
History

20 Nov 2024, 23:49

Type Values Removed Values Added
References () http://digital.net/~gandalf/Rose_Frag_Attack_Explained.txt - () http://digital.net/~gandalf/Rose_Frag_Attack_Explained.txt -
References () http://marc.info/?l=bugtraq&m=108075899619193&w=2 - () http://marc.info/?l=bugtraq&m=108075899619193&w=2 -
References () http://marc.info/?l=bugtraq&m=108308604119618&w=2 - () http://marc.info/?l=bugtraq&m=108308604119618&w=2 -
References () http://www.auscert.org.au/render.html?it=4291 - () http://www.auscert.org.au/render.html?it=4291 -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/16946 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/16946 -
Information

Published : 2004-11-23 05:00

Updated : 2025-04-03 01:03

NVD link : CVE-2004-0744

Mitre link : CVE-2004-0744

CVE.ORG link : CVE-2004-0744

JSON object : View

Products Affected

apple

  • mac_os_x
  • mac_os_x_server
CWE
NVD-CWE-Other