WaratekVRT Sign in

CVE-2005-0356

Affected software11 products, listed below
Severity5.0 Medium CVSS 2.0
Published31 May 2005
Updated16 Jun 2026

Description

Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard later packets because they appear to be too old.

Exploitation status

Working exploit published

A reviewed exploit catalogue lists ready-to-run exploit code for this CVE.

  • CISA KEV not listed
  • VulnCheck KEV not listed
  • CISA Vulnrichment no assessment published
  • Indexed PoC 1 indexed Published artifacts you can open, in Exploit-DB; first seen 2005-05-21.
  • EPSS 83% chance in 30 days A model's forecast, not a report of exploitation. Higher than 99.7% of all scored CVEs.
IndexArtifactStarsFirst seen
Exploit-DB TCP TIMESTAMPS - Denial of Service 2005-05-21

Waratek protection

Outside Waratek scope

A Java vulnerability, but not one Waratek protects. It affects only Java on a user's desktop (applets, Web Start, JavaFX, the installer), sits in a product the Waratek agent can't be installed into, or is in a package we don't expect in business applications. The decision below says which.

  • Protection none
  • Action not pursued none
  • Review automated Upstream data
  • Record active
Decided by The only affected product being a sealed appliance image, where Java runs but no -javaagent can be attached
Finding This CVE names only products the Waratek agent cannot be installed into (cisco/emergency_responder). They ship as sealed appliance images or as native code with no application JVM, so there is no start-up line to add -javaagent to. The vulnerability may well be a Java one; it is permanently out of ARMR's reach rather than outside its subject.

Affected software and releases

Products and versions

76 products, 285 version entries
SourceVendorProductSchemeAffected versions
nvd alaxala alaxala networks generic ax5400s · ax7800r · ax7800s
nvd cisco agent desktop generic any version
nvd cisco aironet ap1200 generic any version
nvd cisco aironet ap350 generic any version
nvd cisco call manager generic 1.0 · 2.0 · 3.0 · 3.1 · 3.1\(2\) · 3.1\(3a\) · 3.2 · 3.3 · 3.3\(3\) · 4.0
nvd cisco ciscoworks 1105 hosting solution engine generic any version
nvd cisco ciscoworks 1105 wireless lan solution engine generic any version
nvd cisco ciscoworks access control list manager generic 1.5 · 1.6
nvd cisco ciscoworks cd1 generic 1st · 2nd · 3rd · 4th · 5th
nvd cisco ciscoworks common management foundation generic 2.0 · 2.1 · 2.2
nvd cisco ciscoworks common services generic 2.2
nvd cisco ciscoworks lms generic 1.3
nvd cisco ciscoworks vpn security management solution generic any version
nvd cisco ciscoworks windows generic any version
nvd cisco ciscoworks windows wug generic any version
nvd cisco conference connection generic 1.1\(1\) · 1.2
nvd cisco content services switch 11000 generic any version
nvd cisco content services switch 11050 generic any version
nvd cisco content services switch 11150 generic any version
nvd cisco content services switch 11500 generic any version
nvd cisco content services switch 11501 generic any version
nvd cisco content services switch 11503 generic any version
nvd cisco content services switch 11506 generic any version
nvd cisco content services switch 11800 generic any version
nvd cisco e-mail manager generic any version
nvd cisco emergency responder generic 1.1
nvd cisco intelligent contact manager generic 5.0
nvd cisco interactive voice response generic any version
nvd cisco ip contact center enterprise generic any version
nvd cisco ip contact center express generic any version
nvd cisco meetingplace generic any version
nvd cisco mgx 8230 generic 1.2.10 · 1.2.11
nvd cisco mgx 8250 generic 1.2.10 · 1.2.11
nvd cisco personal assistant generic 1.3\(1\) · 1.3\(2\) · 1.3\(3\) · 1.3\(4\) · 1.4\(1\) · 1.4\(2\)
nvd cisco remote monitoring suite option generic any version
nvd cisco secure access control server generic 2.0 · 2.1 · 2.3 · 2.3.5.1 · 2.3.6.1 · 2.4 · 2.5 · 2.6 · 2.6.2 · 2.6.3 · 2.6.4 · 2.42 · 3.0 · 3.0.1 · 3.0.3 · 3.1 · 3.1.1 · 3.2 · 3.2\(1\) · 3.2.1 · 3.2\(1.20\) · 3.2\(2\) · 3.2.2 · 3.2\(3\) · 3.3 · 3.3\(1\) · 3.3.1 · 3.3.2
nvd cisco sn 5420 storage router generic any version
nvd cisco sn 5420 storage router firmware generic 1.1\(2\) · 1.1\(3\) · 1.1.3 · 1.1\(4\) · 1.1\(5\) · 1.1\(7\)
nvd cisco sn 5428 storage router generic 2-3.3.1-k9 · 2-3.3.2-k9 · 2.5.1-k9 · 3.2.1-k9 · 3.2.2-k9 · 3.3.1-k9 · 3.3.2-k9
nvd cisco support tools generic any version
nvd cisco unity server generic 2.0 · 2.1 · 2.2 · 2.3 · 2.4 · 2.46 · 3.0 · 3.1 · 3.2 · 3.3 · 4.0
nvd cisco web collaboration option generic any version
nvd cisco webns generic 7.10_\(05.07\)s · 7.20_\(03.09\)s · 7.20_\(03.10\)s · 7.30_\(00.08\)s · 7.30_\(00.09\)s
nvd f5 tmos generic 4.0 · 4.2 · 4.3 · 4.4 · 4.5 · 4.5.6 · 4.5.9 · 4.5.10 · 4.5.11 · 4.5.12 · 4.6 · 4.6.2 · 9.0 · 9.0.1 · 9.0.2 · 9.0.3 · 9.0.4 · 9.0.5
nvd freebsd freebsd generic 1.1.5.1 · 2.0 · 2.0.5 · 2.1.0 · 2.1.5 · 2.1.6 · 2.1.6.1 · 2.1.7.1 · 2.2 · 2.2.2 · 2.2.3 · 2.2.4 · 2.2.5 · 2.2.6 · 2.2.8 · 3.0 · 3.0:releng · 3.1 · 3.2 · 3.3 · 3.4 · 3.5 · 3.5:stable · 3.5.1 · 3.5.1:release · 3.5.1:stable · 4.0 · 4.0:alpha · 4.0:releng · 4.1 · 4.1.1 · 4.1.1:release · 4.1.1:stable · 4.2 · 4.2:stable · 4.3 · 4.3:release · 4.3:releng · 4.3:stable · 4.3:release_p38 · 4.4 · 4.4:releng · 4.4:stable · 4.4:release_p42 · 4.5 · 4.5:release · 4.5:releng · 4.5:stable · 4.5:release_p32 · 4.6 · 4.6:release · 4.6:releng · 4.6:stable · 4.6.2 · 4.6:release_p20 · 4.7 · 4.7:release · 4.7:releng · 4.7:stable · 4.7:release_p17 · 4.8 · 4.8:pre-release · 4.8:releng · 4.8:release_p6 · 4.9 · 4.9:pre-release · 4.9:releng · 4.10 · 4.10:release · 4.10:releng · 4.10:release_p8 · 4.11:releng · 4.11:stable · 4.11:release_p3 · 5.0 · 5.0:alpha · 5.0:releng · 5.0:release_p14 · 5.1 · 5.1:alpha · 5.1:release · 5.1:releng · 5.1:release_p5 · 5.2 · 5.2.1:release · 5.2.1:releng · 5.3 · 5.3:release · 5.3:releng · 5.3:stable · 5.4:pre-release · 5.4:release
nvd hitachi alaxala generic ax
nvd hitachi gr3000 generic any version
nvd hitachi gr4000 generic any version
nvd hitachi gs4000 generic any version
nvd microsoft windows 2000 generic any version
nvd microsoft windows 2003 server generic enterprise · standard · web · r2 · enterprise_64-bit · standard_64-bit
nvd microsoft windows xp generic any version
nvd nortel 7220 wlan access point generic any version
nvd nortel 7250 wlan access point generic any version
nvd nortel business communications manager generic 200 · 400 · 1000
nvd nortel callpilot generic 200i · 201i · 702t · 703t
nvd nortel contact center generic any version
nvd nortel ethernet routing switch 1612 generic any version
nvd nortel ethernet routing switch 1624 generic any version
nvd nortel ethernet routing switch 1648 generic any version
nvd nortel optical metro 5000 generic any version
nvd nortel optical metro 5100 generic any version
nvd nortel optical metro 5200 generic any version
nvd nortel succession communication server 1000 generic any version
nvd nortel survivable remote gateway generic 1.0
nvd nortel universal signaling point generic compact_lite · 5200
nvd openbsd openbsd generic 3.0 · 3.1 · 3.2 · 3.3 · 3.4 · 3.5 · 3.6
nvd yamaha rt105 generic any version
nvd yamaha rt250i generic any version
nvd yamaha rt300i generic any version
nvd yamaha rt57i generic any version
nvd yamaha rtv700 generic any version
nvd yamaha rtx1000 generic any version
nvd yamaha rtx1100 generic any version
nvd yamaha rtx1500 generic any version
nvd yamaha rtx2000 generic any version

References

URLTags
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:15.tcp.asc
ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.64/SCOSA-2005.64.txt
http://secunia.com/advisories/15393
http://secunia.com/advisories/15417/ Patch
http://secunia.com/advisories/18222
http://secunia.com/advisories/18662
http://support.avaya.com/elmodocs2/security/ASA-2006-032.htm
http://www.cisco.com/warp/public/707/cisco-sn-20050518-tcpts.shtml Vendor Advisory
http://www.kb.cert.org/vuls/id/637934 Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/13676 Exploit

Timeline

Published2005-05-31By the CVE Program.
NVD record modified2026-06-16NVD's own last-modified date for this record.