CVE:CVE-2005-0356
CNNVD:CNNVD-200505-1247
RFC 793中定义的传输控制协议(TCP)允许在报文交换网络中进行可靠的主机到主机的传输。RFC 1323引入了一些增强TCP性能的技术，其中两项技术是TCP时间戳和序列号回卷保护(PAWS)。
TCP RFC 1323的PAWS技术中存在安全漏洞。如果启用了TCP时间戳的话，TCP连接的两个端点使用内部时钟用时间戳的值标记TCP首部。如果TCP PAWS配置为使用时间戳值的话，TCP PAWS实现中就会存在拒绝服务漏洞。
如果攻击者向有漏洞的计算机发送了足够多的TCP PAWS报文的话会出现这个漏洞。攻击者可以将报文时间戳设为很大的值。目标机器在处理这个报文时，内部计时器就会更新到这个值，这可能导致丢掉所有之后收到的有效报文，因为这些报文被认定为太旧了或无效。这种技术可能导致目标连接拒绝服务。
solution:Upgrade cisco agent_desktop to a higher version than *; Upgrade cisco e-mail_manager to a higher version than *; Upgrade cisco emergency_responder to a higher version than 1.1,and avoid the version 1.1; Upgrade cisco intelligent_contact_manager to a higher version than 5.0,and avoid the version 5.0; Upgrade cisco interactive_voice_response to a higher version than *; Upgrade cisco ip_contact_center_enterprise to a higher version than *; Upgrade cisco ip_contact_center_express to a higher version than *; Upgrade cisco meetingplace to a higher version than *; Upgrade cisco personal_assistant to a higher version than 1.3(1,1.3(2,1.3(3,1.3(4,1.4(1,1.4(2,and avoid the version 1.3(1),1.3(2),1.3(3),1.3(4),1.4(1),1.4(2); Upgrade cisco remote_monitoring_suite_option to a higher version than *; Upgrade cisco secure_access_control_server to a higher version than 2.0,2.1,2.3,2.3.5.1,2.3.6.1,2.4,2.5,2.6,2.6.2,2.6.3,2.6.4,2.42,3.0,3.0.1,3.0.3,3.1,3.1.1,3.2,3.2(1,3.2(1.20,3.2(2,3.2(3,3.2.1,3.2.2,3.3,3.3(1,3.3.1,3.3.2,and avoid the version 2.0,2.1,2.3,2.3.5.1,2.3.6.1,2.4,2.5,2.6,2.6.2,2.6.3,2.6.4,2.42,3.0,3.0.1,3.0.3,3.1,3.1.1,3.2,3.2(1),3.2(1.20),3.2(2),3.2(3),3.2.1,3.2.2,3.3,3.3(1),3.3.1,3.3.2; Upgrade cisco support_tools to a higher version than *; Upgrade cisco web_collaboration_option to a higher version than *; Upgrade hitachi alaxala to a higher version than ax,and avoid the version ax; Upgrade cisco call_manager to a higher version than 1.0,2.0,3.0,3.1,3.1(2,3.1(3a,3.2,3.3,3.3(3,4.0,and avoid the version 1.0,2.0,3.0,3.1,3.1(2),3.1(3a),3.2,3.3,3.3(3),4.0; Upgrade cisco unity_server to a higher version than 2.0,2.1,2.2,2.3,2.4,2.46,3.0,3.1,3.2,3.3,4.0,and avoid the version 2.0,2.1,2.2,2.3,2.4,2.46,3.0,3.1,3.2,3.3,4.0; Upgrade cisco mgx_8230 to a higher version than 1.2.10,1.2.11,and avoid the version 1.2.10,1.2.11; Upgrade cisco mgx_8250 to a higher version than 1.2.10,1.2.11,and avoid the version 1.2.10,1.2.11; Upgrade cisco ciscoworks_access_control_list_manager to a higher version than 1.5,1.6,and avoid the version 1.5,1.6; Upgrade cisco ciscoworks_common_management_foundation to a higher version than 2.0,2.1,2.2,and avoid the version 2.0,2.1,2.2; Upgrade cisco ciscoworks_common_services to a higher version than 2.2,and avoid the version 2.2; Upgrade cisco ciscoworks_lms to a higher version than 1.3,and avoid the version 1.3; Upgrade cisco ciscoworks_vpn_security_management_solution to a higher version than *; Upgrade cisco ciscoworks_windows to a higher version than *; Upgrade cisco webns to a higher version than 7.10_(05.07s,7.20_(03.09s,7.20_(03.10s,7.30_(00.08s,7.30_(00.09s,and avoid the version 7.10_(05.07)s,7.20_(03.09)s,7.20_(03.10)s,7.30_(00.08)s,7.30_(00.09)s; Upgrade nortel business_communications_manager to a higher version than 200,400,1000,and avoid the version 200,400,1000; Upgrade nortel callpilot to a higher version than 200i,201i,702t,703t,and avoid the version 200i,201i,702t,703t; Upgrade nortel contact_center to a higher version than *; Upgrade cisco content_services_switch_11000 to a higher version than *; Upgrade cisco content_services_switch_11050 to a higher version than *; Upgrade cisco content_services_switch_11150 to a higher version than *; Upgrade cisco content_services_switch_11500 to a higher version than *; Upgrade cisco content_services_switch_11501 to a higher version than *; Upgrade cisco content_services_switch_11503 to a higher version than *; Upgrade cisco content_services_switch_11506 to a higher version than *; Upgrade cisco content_services_switch_11800 to a higher version than *; Upgrade nortel 7220_wlan_access_point to a higher version than *; Upgrade nortel 7250_wlan_access_point to a higher version than *; Upgrade nortel ethernet_routing_switch_1612 to a higher version than *; Upgrade nortel ethernet_routing_switch_1624 to a higher version than *; Upgrade nortel ethernet_routing_switch_1648 to a higher version than *; Upgrade nortel optical_metro_5000 to a higher version than *; Upgrade nortel optical_metro_5100 to a higher version than *; Upgrade nortel optical_metro_5200 to a higher version than *; Upgrade nortel succession_communication_server_1000 to a higher version than *; Upgrade nortel survivable_remote_gateway to a higher version than 1.0,and avoid the version 1.0; Upgrade nortel universal_signaling_point to a higher version than 5200,compact_lite,and avoid the version 5200,compact_lite; Upgrade cisco ciscoworks_1105_hosting_solution_engine to a higher version than *; Upgrade cisco ciscoworks_1105_wireless_lan_solution_engine to a higher version than *; Upgrade cisco ciscoworks_cd1 to a higher version than 1st,2nd,3rd,4th,5th,and avoid the version 1st,2nd,3rd,4th,5th; Upgrade cisco ciscoworks_windows_wug to a higher version than *; Upgrade cisco conference_connection to a higher version than 1.1(1,1.2,and avoid the version 1.1(1),1.2; Upgrade freebsd freebsd to a higher version than 1.1.5.1,2.0,2.0.5,2.1.0,2.1.5,2.1.6,2.1.6.1,2.1.7.1,2.2,2.2.2,2.2.3,2.2.4,2.2.5,2.2.6,2.2.8,3.0,3.0:releng,3.1,3.2,3.3,3.4,3.5,3.5:stable,3.5.1,3.5.1:release,3.5.1:stable,4.0,4.0:alpha,4.0:releng,4.1,4.1.1,4.1.1:release,4.1.1:stable,4.2,4.2:stable,4.3,4.3:release,4.3:release_p38,4.3:releng,4.3:stable,4.4,4.4:release_p42,4.4:releng,4.4:stable,4.5,4.5:release,4.5:release_p32,4.5:releng,4.5:stable,4.6,4.6:release,4.6:release_p20,4.6:releng,4.6:stable,4.6.2,4.7,4.7:release,4.7:release_p17,4.7:releng,4.7:stable,4.8,4.8:pre-release,4.8:release_p6,4.8:releng,4.9,4.9:pre-release,4.9:releng,4.10,4.10:release,4.10:release_p8,4.10:releng,4.11:release_p3,4.11:releng,4.11:stable,5.0,5.0:alpha,5.0:release_p14,5.0:releng,5.1,5.1:alpha,5.1:release,5.1:release_p5,5.1:releng,5.2,5.2.1:release,5.2.1:releng,5.3,5.3:release,5.3:releng,5.3:stable,5.4:pre-release,5.4:release,and avoid the version 1.1.5.1,2.0,2.0.5,2.1.0,2.1.5,2.1.6,2.1.6.1,2.1.7.1,2.2,2.2.2,2.2.3,2.2.4,2.2.5,2.2.6,2.2.8,3.0,3.0:releng,3.1,3.2,3.3,3.4,3.5,3.5:stable,3.5.1,3.5.1:release,3.5.1:stable,4.0,4.0:alpha,4.0:releng,4.1,4.1.1,4.1.1:release,4.1.1:stable,4.2,4.2:stable,4.3,4.3:release,4.3:release_p38,4.3:releng,4.3:stable,4.4,4.4:release_p42,4.4:releng,4.4:stable,4.5,4.5:release,4.5:release_p32,4.5:releng,4.5:stable,4.6,4.6:release,4.6:release_p20,4.6:releng,4.6:stable,4.6.2,4.7,4.7:release,4.7:release_p17,4.7:releng,4.7:stable,4.8,4.8:pre-release,4.8:release_p6,4.8:releng,4.9,4.9:pre-release,4.9:releng,4.10,4.10:release,4.10:release_p8,4.10:releng,4.11:release_p3,4.11:releng,4.11:stable,5.0,5.0:alpha,5.0:release_p14,5.0:releng,5.1,5.1:alpha,5.1:release,5.1:release_p5,5.1:releng,5.2,5.2.1:release,5.2.1:releng,5.3,5.3:release,5.3:releng,5.3:stable,5.4:pre-release,5.4:release; Upgrade microsoft windows_2000 to a higher version than *,*:sp1,*:sp2,*:sp3,*:sp4,and avoid the version *:sp1,*:sp2,*:sp3,*:sp4; Upgrade microsoft windows_2003_server to a higher version than enterprise,enterprise_64-bit,r2,standard,standard_64-bit,web,and avoid the version enterprise,enterprise_64-bit,r2,standard,standard_64-bit,web; Upgrade microsoft windows_xp to a higher version than *,*:gold,*:sp1,*:sp2,and avoid the version *:gold,*:sp1,*:sp2; Upgrade openbsd openbsd to a higher version than 3.0,3.1,3.2,3.3,3.4,3.5,3.6,and avoid the version 3.0,3.1,3.2,3.3,3.4,3.5,3.6; Upgrade alaxala alaxala_networks to a higher version than ax5400s,ax7800r,ax7800s,and avoid the version ax5400s,ax7800r,ax7800s; Upgrade cisco aironet_ap1200 to a higher version than *; Upgrade cisco aironet_ap350 to a higher version than *; Upgrade cisco sn_5420_storage_router to a higher version than *; Upgrade hitachi gr3000 to a higher version than *; Upgrade hitachi gr4000 to a higher version than *; Upgrade hitachi gs4000 to a higher version than *; Upgrade yamaha rt105 to a higher version than *; Upgrade yamaha rt250i to a higher version than *; Upgrade yamaha rt300i to a higher version than *; Upgrade yamaha rt57i to a higher version than *; Upgrade yamaha rtv700 to a higher version than *; Upgrade yamaha rtx1000 to a higher version than *; Upgrade yamaha rtx1100 to a higher version than *; Upgrade yamaha rtx1500 to a higher version than *; Upgrade yamaha rtx2000 to a higher version than *; Upgrade cisco sn_5420_storage_router_firmware to a higher version than 1.1(2,1.1(3,1.1(4,1.1(5,1.1(7,1.1.3,and avoid the version 1.1(2),1.1(3),1.1(4),1.1(5),1.1(7),1.1.3; Upgrade cisco sn_5428_storage_router to a higher version than 2-3.3.1-k9,2-3.3.2-k9,2.5.1-k9,3.2.1-k9,3.2.2-k9,3.3.1-k9,3.3.2-k9,and avoid the version 2-3.3.1-k9,2-3.3.2-k9,2.5.1-k9,3.2.1-k9,3.2.2-k9,3.3.1-k9,3.3.2-k9; Upgrade f5 tmos to a higher version than 4.0,4.2,4.3,4.4,4.5,4.5.6,4.5.9,4.5.10,4.5.11,4.5.12,4.6,4.6.2,9.0,9.0.1,9.0.2,9.0.3,9.0.4,9.0.5,and avoid the version 4.0,4.2,4.3,4.4,4.5,4.5.6,4.5.9,4.5.10,4.5.11,4.5.12,4.6,4.6.2,9.0,9.0.1,9.0.2,9.0.3,9.0.4,9.0.5