WelcomeEnterpriseSmall BusinessHome & Home OfficePartnersAbout Symantec

Multiple Vendor TCP Sequence Number Approximation Vulnerability

Risk
High

Date Discovered
04-20-2004

Description
A vulnerability in TCP implementations has been reported that may permit unauthorized remote users to reset TCP sessions. This issue affects products released by multiple vendors. This issue may permit TCP sequence numbers to be more easily approximated by remote attackers.

The cause of the vulnerability is that affected implementations will accept TCP sequence numbers within a certain range of the expected sequence number for a packet in the session. This will permit a remote attacker to inject a SYN or RST packet into the session, causing it to be reset and effectively allowing for denial of service attacks. An attacker would exploit this issue by sending a packet to a receiving implementation with an approximated sequence number and a forged source IP and TCP port.

There are a few factors that may present viable target implementations, such as those which depend on long-lived TCP connections, those which have known or easily guessed IP address endpoints and those implementations with known or easily guessed TCP source ports. It has been noted that Border Gateway Protocol (BGP) is reported to be particularly vulnerable to this type of attack. As a result, this issue is likely to affect a number of routing platforms.

It should be noted that while a number of vendors have confirmed this issue in various products, investigations are ongoing and it is likely that many other vendors and products will turn out to be vulnerable as the issue is investigated further.

Other consequences may also result from this issue, such as injecting specific data in TCP sessions, though this has not been confirmed.

Symantec Enterprise Security Manager Network Assessment Module

Symantec Enterprise Security Manager Network Assessment Module detects and reports this vulnerability. Click here for the advisory released September 20, 2005.

Platforms Affected
Cisco PIX Firewall 515
Cisco PIX Firewall 520
Cisco VoIP Phone 7902G
Cisco VoIP Phone 7905G
Cisco VoIP Phone 7912G

Components Affected
BlueCoat Systems CacheOS CA/SA 4.1.10
BlueCoat Systems CacheOS CA/SA 4.1.12
BlueCoat Systems Security Gateway OS 2.0
BlueCoat Systems Security Gateway OS 2.1.9
BlueCoat Systems Security Gateway OS 2.1.10
BlueCoat Systems Security Gateway OS 2.1.5001 SP1
BlueCoat Systems Security Gateway OS 3.0
BlueCoat Systems Security Gateway OS 3.1
BlueCoat Systems Security Gateway OS 3.1.2
Check Point Software SecurePlatform NG FP2 Edition 2
Check Point Software SecurePlatform NG FP2
Check Point Software SecurePlatform NG FP1
Check Point Software SecurePlatform NG
Cisco CiscoSecure ACS for Windows and Unix
Cisco 8110 Broadband Network Termination Unit
Cisco 8950 Wan Switch
Cisco Access Registrar
Cisco AP340
Cisco AP350
Cisco Application & Content Networking Software (ACNS)
Cisco BPX
Cisco BPX 8600
Cisco BPX/IGX
Cisco BR340
Cisco BR350
Cisco Cache Engine 505
Cisco Cache Engine 505 2.2 .0
Cisco Cache Engine 505 3.0
Cisco Cache Engine 505 4.0
Cisco Cache Engine 505 4.1
Cisco Cache Engine 570
Cisco Cache Engine 570 2.2 .0
Cisco Cache Engine 570 3.0
Cisco Cache Engine 570 4.0
Cisco Cache Engine 570 4.1
Cisco Call Manager
Cisco Call Manager 1.0
Cisco Call Manager 2.0
Cisco Call Manager 3.0
Cisco Call Manager 3.1 (3a)
Cisco Call Manager 3.1 (2)
Cisco Call Manager 3.1
Cisco Call Manager 3.2
Cisco Call Manager 3.3 (3)
Cisco Call Manager 3.3
Cisco Call Manager 4.0
Cisco Catalyst 1200
Cisco Catalyst 1900
Cisco Catalyst 2800
Cisco Catalyst 2820
Cisco Catalyst 2900
Cisco Catalyst 2900 4.5 (12)
Cisco Catalyst 2900 4.5 (11)
Cisco Catalyst 2900 5.5 (7)
Cisco Catalyst 2900 5.5 (6)
Cisco Catalyst 2900 6.1 (3)
Cisco Catalyst 2900 6.1 (2)
Cisco Catalyst 2900 11.2 (8.2)SA6
Cisco Catalyst 2900 12.0 (5.2)XU
Cisco Catalyst 2900 LRE XL
Cisco Catalyst 2900 XL
Cisco Catalyst 2920
Cisco Catalyst 2948G
Cisco Catalyst 2948G-GE-TX
Cisco Catalyst 2948G-l3
Cisco Catalyst 2950
Cisco Catalyst 29xx supervisor software 1.0
Cisco Catalyst 29xx supervisor software 2.1.5 02
Cisco Catalyst 29xx supervisor software 2.1.5 01
Cisco Catalyst 29xx supervisor software 2.1.5
Cisco Catalyst 29xx supervisor software 2.1.6
Cisco Catalyst 29xx supervisor software 2.1.1102
Cisco Catalyst 29xx supervisor software 2.4.401
Cisco Catalyst 3000
Cisco Catalyst 3900
Cisco Catalyst 4000
Cisco Catalyst 4000 4.5 (9)
Cisco Catalyst 4000 4.5 (8)
Cisco Catalyst 4000 4.5 (7)
Cisco Catalyst 4000 4.5 (6)
Cisco Catalyst 4000 4.5 (5)
Cisco Catalyst 4000 4.5 (4b)
Cisco Catalyst 4000 4.5 (4)
Cisco Catalyst 4000 4.5 (3)
Cisco Catalyst 4000 4.5 (2)
Cisco Catalyst 4000 4.5 (10)
Cisco Catalyst 4000 5.1 (2a)
Cisco Catalyst 4000 5.1 (1a)
Cisco Catalyst 4000 5.1 (1)
Cisco Catalyst 4000 5.1
Cisco Catalyst 4000 5.2 (7)
Cisco Catalyst 4000 5.2 (6)
Cisco Catalyst 4000 5.2 (5)
Cisco Catalyst 4000 5.2 (4)
Cisco Catalyst 4000 5.2 (2)
Cisco Catalyst 4000 5.2 (1a)
Cisco Catalyst 4000 5.2 (1)
Cisco Catalyst 4000 5.2
Cisco Catalyst 4000 5.4 (3)
Cisco Catalyst 4000 5.4 (2)
Cisco Catalyst 4000 5.4 (1)
Cisco Catalyst 4000 5.4
Cisco Catalyst 4000 5.4.1
Cisco Catalyst 4000 5.5 (4b)
Cisco Catalyst 4000 5.5 (4)
Cisco Catalyst 4000 5.5 (3)
Cisco Catalyst 4000 5.5 (2)
Cisco Catalyst 4000 5.5 (13)
Cisco Catalyst 4000 5.5 (1)
Cisco Catalyst 4000 5.5
Cisco Catalyst 4000 5.5.5
Cisco Catalyst 4000 6.1 (1c)
Cisco Catalyst 4000 6.1 (1b)
Cisco Catalyst 4000 6.1 (1a)
Cisco Catalyst 4000 6.1 (1)
Cisco Catalyst 4000 6.3 (4)
Cisco Catalyst 4000 6.3.5
Cisco Catalyst 4000 7.1 (2)
Cisco Catalyst 4000 7.1
Cisco Catalyst 4000 7.1.2
Cisco Catalyst 4000 7.5 (1)
Cisco Catalyst 4000 7.6 (1)
Cisco Catalyst 5000
Cisco Catalyst 5000 4.5 (9)
Cisco Catalyst 5000 4.5 (8)
Cisco Catalyst 5000 4.5 (7)
Cisco Catalyst 5000 4.5 (6)
Cisco Catalyst 5000 4.5 (5)
Cisco Catalyst 5000 4.5 (4b)
Cisco Catalyst 5000 4.5 (4)
Cisco Catalyst 5000 4.5 (3)
Cisco Catalyst 5000 4.5 (2)
Cisco Catalyst 5000 4.5 (13a)
Cisco Catalyst 5000 4.5 (12)
Cisco Catalyst 5000 4.5 (11)
Cisco Catalyst 5000 4.5 (10)
Cisco Catalyst 5000 5.1 (2a)
Cisco Catalyst 5000 5.1 (1)
Cisco Catalyst 5000 5.1
Cisco Catalyst 5000 5.2 (4)
Cisco Catalyst 5000 5.2 (3)
Cisco Catalyst 5000 5.2 (2)
Cisco Catalyst 5000 5.2 (1)
Cisco Catalyst 5000 5.2
Cisco Catalyst 5000 5.4 (4)
Cisco Catalyst 5000 5.4 (3)
Cisco Catalyst 5000 5.4 (2)
Cisco Catalyst 5000 5.4 (1)
Cisco Catalyst 5000 5.4.1
Cisco Catalyst 5000 5.5 (7)
Cisco Catalyst 5000 5.5 (6)
Cisco Catalyst 5000 5.5 (4b)
Cisco Catalyst 5000 5.5 (4)
Cisco Catalyst 5000 5.5 (3)
Cisco Catalyst 5000 5.5 (2)
Cisco Catalyst 5000 5.5 (13)
Cisco Catalyst 5000 5.5 (1)
Cisco Catalyst 5000 6.1 (3)
Cisco Catalyst 5000 6.1 (2)
Cisco Catalyst 5000 6.1 (1c)
Cisco Catalyst 5000 6.1 (1b)
Cisco Catalyst 5000 6.1 (1a)
Cisco Catalyst 5000 6.1 (1)
Cisco Catalyst 5000 6.3 (4)
Cisco Catalyst 6000 2.1 (2)WS-X6380-NAM
Cisco Catalyst 6000 2.2 (1a)WS-SVC-NAM-2
Cisco Catalyst 6000 2.2 (1a)WS-SVC-NAM-1
Cisco Catalyst 6000 3.1 (1a)WS-X6380-NAM
Cisco Catalyst 6000 3.1 (1a)WS-SVC-NAM-2
Cisco Catalyst 6000 3.1 (1a)WS-SVC-NAM-1
Cisco Catalyst 6000 5.3 (6)CSX
Cisco Catalyst 6000 5.3 (5a)CSX
Cisco Catalyst 6000 5.3 (5)CSX
Cisco Catalyst 6000 5.3 (4)CSX
Cisco Catalyst 6000 5.3 (3)CSX
Cisco Catalyst 6000 5.3 (2)CSX
Cisco Catalyst 6000 5.3 (1a)CSX
Cisco Catalyst 6000 5.3 (1)CSX
Cisco Catalyst 6000 5.4 (4)
Cisco Catalyst 6000 5.4 (3)
Cisco Catalyst 6000 5.4 (2)
Cisco Catalyst 6000 5.4 (1)
Cisco Catalyst 6000 5.4
Cisco Catalyst 6000 5.4.1
Cisco Catalyst 6000 5.5 (4b)
Cisco Catalyst 6000 5.5 (4a)
Cisco Catalyst 6000 5.5 (4)
Cisco Catalyst 6000 5.5 (3)
Cisco Catalyst 6000 5.5 (2)
Cisco Catalyst 6000 5.5 (13)
Cisco Catalyst 6000 5.5 (1)
Cisco Catalyst 6000 5.5
Cisco Catalyst 6000 6.1 (2.13)
Cisco Catalyst 6000 6.1 (1c)
Cisco Catalyst 6000 6.1 (1b)
Cisco Catalyst 6000 6.1 (1a)
Cisco Catalyst 6000 6.1 (1)
Cisco Catalyst 6000 6.2 (0.111)
Cisco Catalyst 6000 6.2 (0.110)
Cisco Catalyst 6000 6.3 (4)
Cisco Catalyst 6000 6.3 (0.7)PAN
Cisco Catalyst 6000 7.1 (2)
Cisco Catalyst 6000 7.1
Cisco Catalyst 6000 7.5 (1)
Cisco Catalyst 6000 7.6 (1)
Cisco Catalyst 6500 Series SSL Services Module
Cisco Channel Interface Processor (CIP)
Cisco Channel Port Adapter (CPA)
Cisco CiscoSecure ACS 1111 Appliance
Cisco CiscoWorks Windows
Cisco Content Delivery Manager 4630
Cisco Content Delivery Manager 4650
Cisco Content Distribution Manager 4630
Cisco Content Distribution Manager 4630 4.0
Cisco Content Distribution Manager 4630 4.1
Cisco Content Distribution Manager 4650
Cisco Content Distribution Manager 4650 4.0
Cisco Content Distribution Manager 4650 4.1
Cisco Content Distribution Manager 4670
Cisco Content Engine 507
Cisco Content Engine 507 2.2 .0
Cisco Content Engine 507 3.1
Cisco Content Engine 507 4.0
Cisco Content Engine 507 4.1
Cisco Content Engine 560
Cisco Content Engine 560 2.2 .0
Cisco Content Engine 560 3.1
Cisco Content Engine 560 4.0
Cisco Content Engine 560 4.1
Cisco Content Engine 590
Cisco Content Engine 590 2.2 .0
Cisco Content Engine 590 3.1
Cisco Content Engine 590 4.0
Cisco Content Engine 590 4.1
Cisco Content Engine 7320
Cisco Content Engine 7320 2.2 .0
Cisco Content Engine 7320 3.1
Cisco Content Engine 7320 4.0
Cisco Content Engine 7320 4.1
Cisco Content Router 4430
Cisco Content Router 4430 4.0
Cisco Content Router 4430 4.1
Cisco Content Router 4450
Cisco CR-4430-B
Cisco CSM
Cisco CSS11000 Content Services Switch
Cisco CSS11050 Content Services Switch
Cisco CSS11150 Content Services Switch
Cisco CSS11500 Content Services Switch
Cisco CSS11800 Content Services Switch
Cisco Device Fault Manager
Cisco Element Management Framework
Cisco ESCON Channel Port Adapter (ECPA)
Cisco FastHub 300
Cisco FastHub 400 1.0
Cisco FWSM for Cisco Catalyst 6500/7600 Series
Cisco GSS 4480 Global Site Selector
Cisco GSS 4490 Global Site Selector
Cisco Hosting Solution Engine 1.0
Cisco Hosting Solution Engine 1.3
Cisco IGX 8400
Cisco InfoCenter
Cisco Intelligent Contact Manager
Cisco Intelligent Contact Manager 5.0
Cisco Internet CDN Content Engine 590
Cisco Internet CDN Content Engine 7320
Cisco IOS 11.1 CC
Cisco IOS 11.1 AA
Cisco IOS 11.1
Cisco IOS 11.2 SA
Cisco IOS 11.2 P
Cisco IOS 11.2
Cisco IOS 11.3
Cisco IOS 12.0 XV
Cisco IOS 12.0 XU
Cisco IOS 12.0 XS
Cisco IOS 12.0 XR
Cisco IOS 12.0 XQ
Cisco IOS 12.0 XP
Cisco IOS 12.0 XN
Cisco IOS 12.0 XM
Cisco IOS 12.0 XL
Cisco IOS 12.0 XK
Cisco IOS 12.0 XJ
Cisco IOS 12.0 XI
Cisco IOS 12.0 XH
Cisco IOS 12.0 XG
Cisco IOS 12.0 XE
Cisco IOS 12.0 XD
Cisco IOS 12.0 XC
Cisco IOS 12.0 XB
Cisco IOS 12.0 XA
Cisco IOS 12.0 WX
Cisco IOS 12.0 WT
Cisco IOS 12.0 WC
Cisco IOS 12.0 W5
Cisco IOS 12.0 T
Cisco IOS 12.0 SZ
Cisco IOS 12.0 SX
Cisco IOS 12.0 ST
Cisco IOS 12.0 SL
Cisco IOS 12.0 S
Cisco IOS 12.0 DC
Cisco IOS 12.0 DB
Cisco IOS 12.0 DA
Cisco IOS 12.0
Cisco IOS 12.1 YJ
Cisco IOS 12.1 YI
Cisco IOS 12.1 YH
Cisco IOS 12.1 YF
Cisco IOS 12.1 YE
Cisco IOS 12.1 YD
Cisco IOS 12.1 YC
Cisco IOS 12.1 YB
Cisco IOS 12.1 YA
Cisco IOS 12.1 XV
Cisco IOS 12.1 XU
Cisco IOS 12.1 XT
Cisco IOS 12.1 XR
Cisco IOS 12.1 XQ
Cisco IOS 12.1 XP
Cisco IOS 12.1 XM
Cisco IOS 12.1 XL
Cisco IOS 12.1 XJ
Cisco IOS 12.1 XI
Cisco IOS 12.1 XH
Cisco IOS 12.1 XG
Cisco IOS 12.1 XF
Cisco IOS 12.1 XE
Cisco IOS 12.1 XD
Cisco IOS 12.1 XC
Cisco IOS 12.1 XB
Cisco IOS 12.1 XA
Cisco IOS 12.1 T
Cisco IOS 12.1 EY
Cisco IOS 12.1 EX
Cisco IOS 12.1 EW
Cisco IOS 12.1 EV
Cisco IOS 12.1 EU
Cisco IOS 12.1 EO
Cisco IOS 12.1 EC
Cisco IOS 12.1 EB
Cisco IOS 12.1 EA
Cisco IOS 12.1 E
Cisco IOS 12.1 DB
Cisco IOS 12.1 DA
Cisco IOS 12.1 AY
Cisco IOS 12.1 AX
Cisco IOS 12.1 AA
Cisco IOS 12.1
Cisco IOS 12.2 ZP
Cisco IOS 12.2 ZN
Cisco IOS 12.2 ZL
Cisco IOS 12.2 ZK
Cisco IOS 12.2 ZJ
Cisco IOS 12.2 ZI
Cisco IOS 12.2 ZH
Cisco IOS 12.2 ZG
Cisco IOS 12.2 ZF
Cisco IOS 12.2 ZE
Cisco IOS 12.2 ZD
Cisco IOS 12.2 ZC
Cisco IOS 12.2 ZB
Cisco IOS 12.2 ZA
Cisco IOS 12.2 YZ
Cisco IOS 12.2 YY
Cisco IOS 12.2 YX
Cisco IOS 12.2 YW
Cisco IOS 12.2 YV
Cisco IOS 12.2 YU
Cisco IOS 12.2 YT
Cisco IOS 12.2 YS
Cisco IOS 12.2 YR
Cisco IOS 12.2 YQ
Cisco IOS 12.2 YP
Cisco IOS 12.2 YO
Cisco IOS 12.2 YN
Cisco IOS 12.2 YM
Cisco IOS 12.2 YL
Cisco IOS 12.2 YK
Cisco IOS 12.2 YJ
Cisco IOS 12.2 YH
Cisco IOS 12.2 YG
Cisco IOS 12.2 YF
Cisco IOS 12.2 YE
Cisco IOS 12.2 YD
Cisco IOS 12.2 YC
Cisco IOS 12.2 YB
Cisco IOS 12.2 YA
Cisco IOS 12.2 XW
Cisco IOS 12.2 XU
Cisco IOS 12.2 XT
Cisco IOS 12.2 XS
Cisco IOS 12.2 XQ
Cisco IOS 12.2 XN
Cisco IOS 12.2 XM
Cisco IOS 12.2 XL
Cisco IOS 12.2 XK
Cisco IOS 12.2 XJ
Cisco IOS 12.2 XI
Cisco IOS 12.2 XH
Cisco IOS 12.2 XG
Cisco IOS 12.2 XF
Cisco IOS 12.2 XE
Cisco IOS 12.2 XD
Cisco IOS 12.2 XC
Cisco IOS 12.2 XB
Cisco IOS 12.2 XA
Cisco IOS 12.2 T
Cisco IOS 12.2 SZ
Cisco IOS 12.2 SY
Cisco IOS 12.2 SXB
Cisco IOS 12.2 SXA
Cisco IOS 12.2 SX
Cisco IOS 12.2 SW
Cisco IOS 12.2 SE
Cisco IOS 12.2 S
Cisco IOS 12.2 MC
Cisco IOS 12.2 JA
Cisco IOS 12.2 EW
Cisco IOS 12.2 DX
Cisco IOS 12.2 DD
Cisco IOS 12.2 CX
Cisco IOS 12.2 BZ
Cisco IOS 12.2 BY
Cisco IOS 12.2 BX
Cisco IOS 12.2 BW
Cisco IOS 12.2 BC
Cisco IOS 12.2 B
Cisco IOS 12.2
Cisco IOS 12.3 XQ
Cisco IOS 12.3 XN
Cisco IOS 12.3 XM
Cisco IOS 12.3 XL
Cisco IOS 12.3 XK
Cisco IOS 12.3 XJ
Cisco IOS 12.3 XI
Cisco IOS 12.3 XH
Cisco IOS 12.3 XG
Cisco IOS 12.3 XF
Cisco IOS 12.3 XE
Cisco IOS 12.3 XD
Cisco IOS 12.3 XC
Cisco IOS 12.3 XB
Cisco IOS 12.3 XA
Cisco IOS 12.3 T
Cisco IOS 12.3 BW
Cisco IOS 12.3 B
Cisco IOS 12.3
Cisco IP Phone 7905
Cisco IP Phone 7940
Cisco IP Phone 7960
Cisco IP/TV Server
Cisco LightStream 100 ATM Switches
Cisco LightStream 1010
Cisco Local Director
Cisco MDS 9000
Cisco MDS 9000 1.3 (3.33)
Cisco MDS 9000 2.0 (0.86)
Cisco ME1100
Cisco MGX
Cisco MGX 8230 1.2.10
Cisco MGX 8230 1.2.10
Cisco MGX 8230 1.2.11
Cisco MGX 8250 1.2.10
Cisco MGX 8250 1.2.10
Cisco MGX 8250 1.2.11
Cisco MGX 8830
Cisco MGX 8850
Cisco MGX 8850 - PXM1 1.2.10
Cisco MGX 8850 - PXM1 1.2.10
Cisco MGX 8850 - PXM1 1.2.11
Cisco MGX-8220
Cisco MGX-8240
Cisco MGX-8260
Cisco MGX-8850 R1
Cisco MGX-8850 R2
Cisco MicroHub 1500
Cisco MicroSwitch 1538
Cisco MicroSwitch 1548
Cisco ONS 15190 IP Transport Concentrator
Cisco ONS 15194 IP Transport Concentrator
Cisco ONS 15327 3.0
Cisco ONS 15327 3.1
Cisco ONS 15327 3.2
Cisco ONS 15327 3.3
Cisco ONS 15327 3.4
Cisco ONS 15327 4.0 (2)
Cisco ONS 15327 4.0 (1)
Cisco ONS 15327 4.0
Cisco ONS 15327 4.1 (3)
Cisco ONS 15327 4.1 (2)
Cisco ONS 15327 4.1 (1)
Cisco ONS 15327 4.1 (0)
Cisco ONS 15454 Optical Transport Platform 3.0
Cisco ONS 15454 Optical Transport Platform 3.1 .0
Cisco ONS 15454 Optical Transport Platform 3.2 .0
Cisco ONS 15454 Optical Transport Platform 3.3
Cisco ONS 15454 Optical Transport Platform 3.4
Cisco ONS 15454 Optical Transport Platform 4.0 (2)
Cisco ONS 15454 Optical Transport Platform 4.0 (1)
Cisco ONS 15454 Optical Transport Platform 4.0
Cisco ONS 15454 Optical Transport Platform 4.1 (3)
Cisco ONS 15454 Optical Transport Platform 4.1 (2)
Cisco ONS 15454 Optical Transport Platform 4.1 (1)
Cisco ONS 15454 Optical Transport Platform 4.1 (0)
Cisco ONS 15454 Optical Transport Platform 4.1
Cisco ONS 15531 T31 OMDS Metro WDM System
Cisco ONS 15532 T31 OMDS Metro WDM System
Cisco ONS 15800 Dense Wave Division MuX Platform
Cisco ONS 15801 Dense Wave Division MuX Platform
Cisco ONS 15808 Dense Wave Division MuX Platform
Cisco ONS 15830 T30 Optical Amplification System
Cisco ONS 15831 T31 DWDM System
Cisco ONS 15832 T31 DWDM System
Cisco ONS 15863 T31 Submarine WDM System
Cisco Parallel Channel Port Adapter (PCPA)
Cisco PIX Firewall 6.0 (4.101)
Cisco PIX Firewall 6.0 (4)
Cisco PIX Firewall 6.0 (2)
Cisco PIX Firewall 6.0 (1)
Cisco PIX Firewall 6.0
Cisco PIX Firewall 6.0.3
Cisco PIX Firewall 6.0.4
Cisco PIX Firewall 6.1 (5)
Cisco PIX Firewall 6.1 (4)
Cisco PIX Firewall 6.1 (3)
Cisco PIX Firewall 6.1 (2)
Cisco PIX Firewall 6.1 (1)
Cisco PIX Firewall 6.1
Cisco PIX Firewall 6.1.3
Cisco PIX Firewall 6.1.4
Cisco PIX Firewall 6.1.5
Cisco PIX Firewall 6.2 (3.100)
Cisco PIX Firewall 6.2 (3)
Cisco PIX Firewall 6.2 (2)
Cisco PIX Firewall 6.2 (1)
Cisco PIX Firewall 6.2
Cisco PIX Firewall 6.2.1
Cisco PIX Firewall 6.2.2 .111
Cisco PIX Firewall 6.2.2
Cisco PIX Firewall 6.2.3
Cisco PIX Firewall 6.3 (3.109)
Cisco PIX Firewall 6.3 (3.102)
Cisco PIX Firewall 6.3 (1)
Cisco PIX Firewall 6.3
Cisco PIX Firewall 6.3.1
Cisco RTM
Cisco Secure Intrusion Detection System (NetRanger)
Cisco Secure PIX Firewall
Cisco SN 5420 Storage Router 1.1 (7)
Cisco SN 5420 Storage Router 1.1 (5)
Cisco SN 5420 Storage Router 1.1 (4)
Cisco SN 5420 Storage Router 1.1 (3)
Cisco SN 5420 Storage Router 1.1 (2)
Cisco SN 5420 Storage Router 1.1.3
Cisco SN 5428 Storage Router SN5428-3.3.2-K9
Cisco SN 5428 Storage Router SN5428-3.3.1-K9
Cisco SN 5428 Storage Router SN5428-3.2.2-K9
Cisco SN 5428 Storage Router SN5428-3.2.1-K9
Cisco SN 5428 Storage Router SN5428-2.5.1-K9
Cisco SN 5428 Storage Router SN5428-2-3.3.2-K9
Cisco SN 5428 Storage Router SN5428-2-3.3.1-K9
Cisco SN5400 series storage routers
Cisco SwitchProbe 3.1
Cisco SwitchProbe 4.1
Cisco SwitchProbe 4.2
Cisco SwitchProbe 4.5
Cisco SwitchProbe 4.6
Cisco SwitchProbe 4.7
Cisco SwitchProbe 5.1
Cisco Traffic Director
Cisco Unity Server
Cisco Unity Server 2.0
Cisco Unity Server 2.1
Cisco Unity Server 2.2
Cisco Unity Server 2.3
Cisco Unity Server 2.4
Cisco Unity Server 2.46
Cisco Unity Server 3.0
Cisco Unity Server 3.1
Cisco Unity Server 3.2
Cisco Unity Server 3.3
Cisco Unity Server 4.0
Cisco User Registration Tool VLAN Policy Server
Cisco VG248 Analog Phone Gateway
Cisco Voice Manager
Cisco VPN 5001 Concentrator
Cisco VPN 5002 Concentrator
Cisco VPN 5008 Concentrator
Cisco WAN Manager
Cisco WGB340
Cisco Wireless LAN Solution Appliance
Cisco Wireless Lan Solution Engine
Cisco ws-x6608
Cisco ws-x6624
Cray UNICOS 6.0 E
Cray UNICOS 6.0
Cray UNICOS 6.1
Cray UNICOS 7.0
Cray UNICOS 8.0
Cray UNICOS 8.3
Cray UNICOS 9.0
Cray UNICOS 9.0.2 .5
Cray UNICOS 9.2 .4
Cray UNICOS 9.2
Cray UNICOS MAX 1.3 .5
Cray UNICOS MAX 1.3
Cray UNICOS/mk 1.5
Cray UNICOS/mk 1.5.1
Cray UNICOS/mk 2.0.5 .54
Cray UNICOS/mp
Cray UNICOS/mp 2.3
HP AdvanceStack 10Base-T Switching Hub J3200A A.03.07
HP AdvanceStack 10Base-T Switching Hub J3201A A.03.07
HP AdvanceStack 10Base-T Switching Hub J3202A A.03.07
HP AdvanceStack 10Base-T Switching Hub J3203A A.03.07
HP AdvanceStack 10Base-T Switching Hub J3204A A.03.07
HP AdvanceStack 10Base-T Switching Hub J3205A A.03.07
HP AdvanceStack 10Base-T Switching Hub J3210A A.03.07
HP Advancestack Switch 800T J3245A
HP EtherTwist
HP Procurve Switch 1600M
HP Procurve Switch 2400M
HP ProCurve Switch 2400M J4122A
HP Procurve Switch 2424M
HP ProCurve Switch 2424M J4093A
HP Procurve Switch 2512
HP Procurve Switch 2524
HP ProCurve Switch 2524 J4813A
HP Procurve Switch 2525
HP Procurve Switch 4000M
HP ProCurve Switch 4000M J4121A
HP Procurve Switch 4108GL
HP ProCurve Switch 4108GL J4865A
HP Procurve Switch 4108GL-bundle
HP ProCurve Switch 5304XL J4850A
HP ProCurve Switch 5308XL J4819A
HP ProCurve Switch 5348XL J4849A
HP ProCurve Switch 5372XL J4848A
HP Procurve Switch 8000M
HP ProCurve Switch 9304M
HP ProCurve Switch 9308M
HP ProCurve Switch 9315M
IETF RFC 1323: TCP Extensions for High Performance
IETF RFC 793: TCP
InterNiche NicheLite 2.0
InterNiche NicheStack 2.0
Juniper Networks E-series Router
Juniper Networks M-series Router M5
Juniper Networks M-series Router M40e
Juniper Networks M-series Router M40
Juniper Networks M-series Router M20
Juniper Networks M-series Router M160
Juniper Networks M-series Router M10
Juniper Networks T-series Router T640
Juniper Networks T-series Router T320
NetBSD NetBSD 1.5
NetBSD NetBSD 1.5.1
NetBSD NetBSD 1.5.2
NetBSD NetBSD 1.5.3
NetBSD NetBSD 1.6 beta
NetBSD NetBSD 1.6
NetBSD NetBSD 1.6.1
NetBSD NetBSD 1.6.2
NetBSD NetBSD 2.0
NetScreen ScreenOS 1.7
NetScreen ScreenOS 1.64
NetScreen ScreenOS 1.66 r2
NetScreen ScreenOS 1.66
NetScreen ScreenOS 1.73 r2
NetScreen ScreenOS 1.73 r1
NetScreen ScreenOS 2.0.1 r8
NetScreen ScreenOS 2.1 r7
NetScreen ScreenOS 2.1 r6
NetScreen ScreenOS 2.1
NetScreen ScreenOS 2.5 r6
NetScreen ScreenOS 2.5 r2
NetScreen ScreenOS 2.5 r1
NetScreen ScreenOS 2.5
NetScreen ScreenOS 2.6
NetScreen ScreenOS 2.6.1 r9
NetScreen ScreenOS 2.6.1 r8
NetScreen ScreenOS 2.6.1 r7
NetScreen ScreenOS 2.6.1 r6
NetScreen ScreenOS 2.6.1 r5
NetScreen ScreenOS 2.6.1 r4
NetScreen ScreenOS 2.6.1 r3
NetScreen ScreenOS 2.6.1 r2
NetScreen ScreenOS 2.6.1 r12
NetScreen ScreenOS 2.6.1 r11
NetScreen ScreenOS 2.6.1 r10
NetScreen ScreenOS 2.6.1 r1
NetScreen ScreenOS 2.6.1
NetScreen ScreenOS 2.7.1 r3
NetScreen ScreenOS 2.7.1 r2
NetScreen ScreenOS 2.7.1 r1
NetScreen ScreenOS 2.7.1
NetScreen ScreenOS 2.8 r1
NetScreen ScreenOS 2.8
NetScreen ScreenOS 2.10 r4
NetScreen ScreenOS 2.10 r3
NetScreen ScreenOS 3.0 r4
NetScreen ScreenOS 3.0 r3
NetScreen ScreenOS 3.0 r2
NetScreen ScreenOS 3.0 r1
NetScreen ScreenOS 3.0
NetScreen ScreenOS 3.0.1 r7
NetScreen ScreenOS 3.0.1 r6
NetScreen ScreenOS 3.0.1 r5
NetScreen ScreenOS 3.0.1 r4
NetScreen ScreenOS 3.0.1 r3
NetScreen ScreenOS 3.0.1 r2
NetScreen ScreenOS 3.0.1 r1
NetScreen ScreenOS 3.0.1
NetScreen ScreenOS 3.0.2
NetScreen ScreenOS 3.0.3 r8
NetScreen ScreenOS 3.0.3 r7
NetScreen ScreenOS 3.0.3 r6
NetScreen ScreenOS 3.0.3 r5
NetScreen ScreenOS 3.0.3 r4
NetScreen ScreenOS 3.0.3 r3
NetScreen ScreenOS 3.0.3 r2
NetScreen ScreenOS 3.0.3 r1.1
NetScreen ScreenOS 3.0.3 r1
NetScreen ScreenOS 3.0.3
NetScreen ScreenOS 3.1 r9
NetScreen ScreenOS 3.1 r8
NetScreen ScreenOS 3.1 r7
NetScreen ScreenOS 3.1 r6
NetScreen ScreenOS 3.1 r5
NetScreen ScreenOS 3.1 r4
NetScreen ScreenOS 3.1 r3
NetScreen ScreenOS 3.1 r2
NetScreen ScreenOS 3.1 r12
NetScreen ScreenOS 3.1 r11
NetScreen ScreenOS 3.1 r10
NetScreen ScreenOS 3.1 r1
NetScreen ScreenOS 3.1
NetScreen ScreenOS 3.1.1 r2
NetScreen ScreenOS 4.0 r9
NetScreen ScreenOS 4.0 r8
NetScreen ScreenOS 4.0 r7
NetScreen ScreenOS 4.0 r6
NetScreen ScreenOS 4.0 r5
NetScreen ScreenOS 4.0 r4
NetScreen ScreenOS 4.0 r3
NetScreen ScreenOS 4.0 r2
NetScreen ScreenOS 4.0 r12
NetScreen ScreenOS 4.0 r11
NetScreen ScreenOS 4.0 r10
NetScreen ScreenOS 4.0 r1
NetScreen ScreenOS 4.0 -DIAL
NetScreen ScreenOS 4.0
NetScreen ScreenOS 4.0.1 r9
NetScreen ScreenOS 4.0.1 r8
NetScreen ScreenOS 4.0.1 r7
NetScreen ScreenOS 4.0.1 r6
NetScreen ScreenOS 4.0.1 r5
NetScreen ScreenOS 4.0.1 r4
NetScreen ScreenOS 4.0.1 r3
NetScreen ScreenOS 4.0.1 r2
NetScreen ScreenOS 4.0.1 r10
NetScreen ScreenOS 4.0.1 r1
NetScreen ScreenOS 4.0.1
NetScreen ScreenOS 4.0.2
NetScreen ScreenOS 4.0.3 r4
NetScreen ScreenOS 4.0.3 r3
NetScreen ScreenOS 4.0.3 r2
NetScreen ScreenOS 4.0.3 r1
NetScreen ScreenOS 4.0.3
NetScreen ScreenOS 5.0
SEIL neu 128 ("Ver.1" series) 1.89
SEIL neu 128 ("Ver.2" series) 2.21
SEIL neu 2FE ("Ver.1" series) 1.89
SEIL neu 2FE ("Ver.2" series) 2.21
SEIL neu 2FE Plus 1.9
SEIL neu ATM 1.35
SEIL neu T1 ("Ver.1" series) 1.89
SEIL neu T1 ("Ver.2" series) 2.21
SEIL Turbo 1.18
SGI IRIX 6.5.22
SGI IRIX 6.5.23
SGI IRIX 6.5.24
SGI IRIX 6.5.25

Recommendations
Block external access at the network boundary, unless service is required by external parties.
Employ ingress and egress filtering to verify source IP addresses at the network gateway.

Communicate sensitive information over encrypted channels.
Implementing IP Security (IPSEC) to encrypt TCP traffic can help against an attack. Authenticated BGP may also be deployed to mitigate attacks versus BGP implementations.

Review and adjust according to policy any default configuration settings.
Limiting TCP source port information may conceal sensitive information from an attacker that may be useful in carrying out an attack.

SGI has released an advisory (20040905-01-P) and updates dealing with this issue for affected IRIX platforms. Customers are advised to see the referenced advisory for further information regarding obtaining and applying appropriate updates.

Cisco has released an updated advisory (cisco-sa-20040420-tcp-ios)(ver 2.0) to address this issue in IOS based Cisco products. The updated advisory contains update fix availability details. Customers are advised to see the referenced advisory for further details regarding obtaining and applying appropriate fixes.

HP has released an advisory (HPSBGN01041 - SSRT4696), it is reported in this advisory that ProCurve Routing Switches and all managed HP EtherTwist, HP AdvanceStack and HP ProCurve devices are prone to this vulnerability. The referenced advisory contains workaround details for all of the affected devices; please see referenced advisory for further details.

Cisco has released two updated advisories (cisco-sa-20040420-tcp-ios) and (cisco-sa-20040420-tcp-nonios) (ver 1.7) to address this issue in IOS based and non-IOS based Cisco products. The updated advisories contain additional affected packages and fix details as well as workarounds. Customers are advised to see referenced advisories for further details regarding obtaining and applying appropriate fixes.

Juniper Networks have acknowledged that the issue described in this BID affects M-series and T-series routers that are running software built prior to March 1st 2004, all Juniper E-series routers running software previous to Release 5.2.1 and all NetScreen firewalls running ScreenOS previous to release 5.0R6. Customers are advised to contact their customer representative in order to retrieve further details regarding obtaining and applying updates.

SGI has released an advisory (20040403-01-A), the advisory acknowledges the vulnerability and reports that SGI are currently investigating this issue in SGI products. Please see the referenced advisory for further details.

Check Point have released an alert (TCP RFC Alert) and have acknowledged that the issue described in this BID affects Check Point SecurePlatform NG and above. Check point have advised that customers upgrade to VPN-1/FireWall-1 R55 HFA-03 or newer, although this product is not affected, this upgrade will allow the Firewall to be configured so that it protects the entire network against the vulnerability described in this BID. Please see referenced advisory for further details.

Cray have acknowledged that the issue described in this BID affects UNICOS/mp, UNICOS and UNICOS/mk. Customers are advised to contact their customer representative in order to retrieve further details regarding obtaining and applying updates.

SEIL have released an advisory (announce_en_20040421_01) to address this issue in SEIL products. Customers are advised to see the referenced advisory for further details regarding obtaining and applying appropriate fixes. Updated firmware will be reportedly available on April 23rd 2004.

Blue Coat Systems have released an advisory (advisory_tcp_can-2004-0230) to address this issue in Blue Coat Systems products. Customers are advised to see the referenced advisory for further details regarding obtaining and applying appropriate fixes.

Various implementations and products including Check Point, Cisco, Cray Inc, Hitachi, Internet Initiative Japan, Inc (IIJ), Juniper Networks, NEC, Polycom, and Yamaha are currently undergoing review. Users are advised to contact vendors in order to obtain more information about affected products and fixes.

It has been reported that Check Point VPN-1/FireWall-1 R55 HFA-03 contains a fix to address this issue.

The Internet Engineering Task Force (IETF) has developed a draft to address this issue. This draft can be found at the following location when it is available:
http://www.ietf.org/internet-drafts/draft-ietf-tcpm-tcpsecure-00.txt

ISS (Internet Security Systems) has released an advisory along with the relevant updates dealing with this issue. Please see the referenced advisory for more information and details on obtaining the updates.

NetBSD has released an advisory (2005-006) as well as fix information dealing with this issue. Please see the referenced advisory for information on applying the fixes.

(Apr 30) Cisco has released revisions for their two advisories for IOS and non-IOS products. The IOS advisory includes resolution details for IOS 12.1, 12.3T FW, 12.1DA, 12.3T and 12.2 releases. The non-IOS advisory states that Cisco FWSM for Cisco Catalyst 6500/7600 Series was initially thought to be invulnerable but is now considered vulnerable. The non-IOS advisory also includes additional information about Cisco ACNS being vulnerable and resolution details for PIX Firewall. Please refer to the advisories for more information.


BlueCoat Systems CacheOS CA/SA 4.1.10:
BlueCoat Systems CacheOS CA/SA 4.1.12:
BlueCoat Systems Security Gateway OS 2.0:
BlueCoat Systems Security Gateway OS 2.1.9:
BlueCoat Systems Security Gateway OS 2.1.10:
BlueCoat Systems Security Gateway OS 2.1.5001 SP1:
BlueCoat Systems Security Gateway OS 3.0:
BlueCoat Systems Security Gateway OS 3.1:
BlueCoat Systems Security Gateway OS 3.1.2:
Check Point Software SecurePlatform NG FP2 Edition 2:
Check Point Software SecurePlatform NG FP2:
Check Point Software SecurePlatform NG FP1:
Check Point Software SecurePlatform NG :
Cisco CiscoSecure ACS for Windows and Unix :
Cisco 8110 Broadband Network Termination Unit :
Cisco 8950 Wan Switch :
Cisco Access Registrar :
Cisco AP340 :
Cisco AP350 :
Cisco Application & Content Networking Software (ACNS) :
Cisco BPX :
Cisco BPX 8600 :
Cisco BPX/IGX :
Cisco BR340 :
Cisco BR350 :
Cisco Cache Engine 505 :
Cisco Cache Engine 505 2.2 .0:
Cisco Cache Engine 505 3.0:
Cisco Cache Engine 505 4.0:
Cisco Cache Engine 505 4.1:
Cisco Cache Engine 570 :
Cisco Cache Engine 570 2.2 .0:
Cisco Cache Engine 570 3.0:
Cisco Cache Engine 570 4.0:
Cisco Cache Engine 570 4.1:
Cisco Call Manager :
Cisco Call Manager 1.0:
Cisco Call Manager 2.0:
Cisco Call Manager 3.0:
Cisco Call Manager 3.1 (3a):
Cisco Call Manager 3.1 (2):
Cisco Call Manager 3.1:
Cisco Call Manager 3.2:
Cisco Call Manager 3.3 (3):
Cisco Call Manager 3.3:
Cisco Call Manager 4.0:
Cisco Catalyst 1200 :
Cisco Catalyst 1900 :
Cisco Catalyst 2800 :
Cisco Catalyst 2820 :
Cisco Catalyst 2900 :
Cisco Catalyst 2900 4.5 (12):
Cisco Catalyst 2900 4.5 (11):
Cisco Catalyst 2900 5.5 (7):
Cisco Catalyst 2900 5.5 (6):
Cisco Catalyst 2900 6.1 (3):
Cisco Catalyst 2900 6.1 (2):
Cisco Catalyst 2900 11.2 (8.2)SA6:
Cisco Catalyst 2900 12.0 (5.2)XU:
Cisco Catalyst 2900 LRE XL :
Cisco Catalyst 2900 XL :
Cisco Catalyst 2920 :
Cisco Catalyst 2948G :
Cisco Catalyst 2948G-GE-TX :
Cisco Catalyst 2948G-l3 :
Cisco Catalyst 2950 :
Cisco Catalyst 29xx supervisor software 1.0:
Cisco Catalyst 29xx supervisor software 2.1.5 02:
Cisco Catalyst 29xx supervisor software 2.1.5 01:
Cisco Catalyst 29xx supervisor software 2.1.5:
Cisco Catalyst 29xx supervisor software 2.1.6:
Cisco Catalyst 29xx supervisor software 2.1.1102:
Cisco Catalyst 29xx supervisor software 2.4.401:
Cisco Catalyst 3000 :
Cisco Catalyst 3900 :
Cisco Catalyst 4000 :
Cisco Catalyst 4000 4.5 (9):
Cisco Catalyst 4000 4.5 (8):
Cisco Catalyst 4000 4.5 (7):
Cisco Catalyst 4000 4.5 (6):
Cisco Catalyst 4000 4.5 (5):
Cisco Catalyst 4000 4.5 (4b):
Cisco Catalyst 4000 4.5 (4):
Cisco Catalyst 4000 4.5 (3):
Cisco Catalyst 4000 4.5 (2):
Cisco Catalyst 4000 4.5 (10):
Cisco Catalyst 4000 5.1 (2a):
Cisco Catalyst 4000 5.1 (1a):
Cisco Catalyst 4000 5.1 (1):
Cisco Catalyst 4000 5.1:
Cisco Catalyst 4000 5.2 (7):
Cisco Catalyst 4000 5.2 (6):
Cisco Catalyst 4000 5.2 (5):
Cisco Catalyst 4000 5.2 (4):
Cisco Catalyst 4000 5.2 (2):
Cisco Catalyst 4000 5.2 (1a):
Cisco Catalyst 4000 5.2 (1):
Cisco Catalyst 4000 5.2:
Cisco Catalyst 4000 5.4 (3):
Cisco Catalyst 4000 5.4 (2):
Cisco Catalyst 4000 5.4 (1):
Cisco Catalyst 4000 5.4:
Cisco Catalyst 4000 5.4.1:
Cisco Catalyst 4000 5.5 (4b):
Cisco Catalyst 4000 5.5 (4):
Cisco Catalyst 4000 5.5 (3):
Cisco Catalyst 4000 5.5 (2):
Cisco Catalyst 4000 5.5 (13):
Cisco Catalyst 4000 5.5 (1):
Cisco Catalyst 4000 5.5:
Cisco Catalyst 4000 5.5.5:
Cisco Catalyst 4000 6.1 (1c):
Cisco Catalyst 4000 6.1 (1b):
Cisco Catalyst 4000 6.1 (1a):
Cisco Catalyst 4000 6.1 (1):
Cisco Catalyst 4000 6.3 (4):
Cisco Catalyst 4000 6.3.5:
Cisco Catalyst 4000 7.1 (2):
Cisco Catalyst 4000 7.1:
Cisco Catalyst 4000 7.1.2:
Cisco Catalyst 4000 7.5 (1):
Cisco Catalyst 4000 7.6 (1):
Cisco Catalyst 5000 :
Cisco Catalyst 5000 4.5 (9):
Cisco Catalyst 5000 4.5 (8):
Cisco Catalyst 5000 4.5 (7):
Cisco Catalyst 5000 4.5 (6):
Cisco Catalyst 5000 4.5 (5):
Cisco Catalyst 5000 4.5 (4b):
Cisco Catalyst 5000 4.5 (4):
Cisco Catalyst 5000 4.5 (3):
Cisco Catalyst 5000 4.5 (2):
Cisco Catalyst 5000 4.5 (13a):
Cisco Catalyst 5000 4.5 (12):
Cisco Catalyst 5000 4.5 (11):
Cisco Catalyst 5000 4.5 (10):
Cisco Catalyst 5000 5.1 (2a):
Cisco Catalyst 5000 5.1 (1):
Cisco Catalyst 5000 5.1:
Cisco Catalyst 5000 5.2 (4):
Cisco Catalyst 5000 5.2 (3):
Cisco Catalyst 5000 5.2 (2):
Cisco Catalyst 5000 5.2 (1):
Cisco Catalyst 5000 5.2:
Cisco Catalyst 5000 5.4 (4):
Cisco Catalyst 5000 5.4 (3):
Cisco Catalyst 5000 5.4 (2):
Cisco Catalyst 5000 5.4 (1):
Cisco Catalyst 5000 5.4.1:
Cisco Catalyst 5000 5.5 (7):
Cisco Catalyst 5000 5.5 (6):
Cisco Catalyst 5000 5.5 (4b):
Cisco Catalyst 5000 5.5 (4):
Cisco Catalyst 5000 5.5 (3):
Cisco Catalyst 5000 5.5 (2):
Cisco Catalyst 5000 5.5 (13):
Cisco Catalyst 5000 5.5 (1):
Cisco Catalyst 5000 6.1 (3):
Cisco Catalyst 5000 6.1 (2):
Cisco Catalyst 5000 6.1 (1c):
Cisco Catalyst 5000 6.1 (1b):
Cisco Catalyst 5000 6.1 (1a):
Cisco Catalyst 5000 6.1 (1):
Cisco Catalyst 5000 6.3 (4):
Cisco Catalyst 6000 2.1 (2)WS-X6380-NAM:
Cisco Catalyst 6000 2.2 (1a)WS-SVC-NAM-2:
Cisco Catalyst 6000 2.2 (1a)WS-SVC-NAM-1:
Cisco Catalyst 6000 3.1 (1a)WS-X6380-NAM:
Cisco Catalyst 6000 3.1 (1a)WS-SVC-NAM-2:
Cisco Catalyst 6000 3.1 (1a)WS-SVC-NAM-1:
Cisco Catalyst 6000 5.3 (6)CSX:
Cisco Catalyst 6000 5.3 (5a)CSX:
Cisco Catalyst 6000 5.3 (5)CSX:
Cisco Catalyst 6000 5.3 (4)CSX:
Cisco Catalyst 6000 5.3 (3)CSX:
Cisco Catalyst 6000 5.3 (2)CSX:
Cisco Catalyst 6000 5.3 (1a)CSX:
Cisco Catalyst 6000 5.3 (1)CSX:
Cisco Catalyst 6000 5.4 (4):
Cisco Catalyst 6000 5.4 (3):
Cisco Catalyst 6000 5.4 (2):
Cisco Catalyst 6000 5.4 (1):
Cisco Catalyst 6000 5.4:
Cisco Catalyst 6000 5.4.1:
Cisco Catalyst 6000 5.5 (4b):
Cisco Catalyst 6000 5.5 (4a):
Cisco Catalyst 6000 5.5 (4):
Cisco Catalyst 6000 5.5 (3):
Cisco Catalyst 6000 5.5 (2):
Cisco Catalyst 6000 5.5 (13):
Cisco Catalyst 6000 5.5 (1):
Cisco Catalyst 6000 5.5:
Cisco Catalyst 6000 6.1 (2.13):
Cisco Catalyst 6000 6.1 (1c):
Cisco Catalyst 6000 6.1 (1b):
Cisco Catalyst 6000 6.1 (1a):
Cisco Catalyst 6000 6.1 (1):
Cisco Catalyst 6000 6.2 (0.111):
Cisco Catalyst 6000 6.2 (0.110):
Cisco Catalyst 6000 6.3 (4):
Cisco Catalyst 6000 6.3 (0.7)PAN:
Cisco Catalyst 6000 7.1 (2):
Cisco Catalyst 6000 7.1:
Cisco Catalyst 6000 7.5 (1):
Cisco Catalyst 6000 7.6 (1):
Cisco Catalyst 6500 Series SSL Services Module :
Cisco Channel Interface Processor (CIP) :
Cisco Channel Port Adapter (CPA) :
Cisco CiscoSecure ACS 1111 Appliance :
Cisco CiscoWorks Windows :
Cisco Content Delivery Manager 4630 :
Cisco Content Delivery Manager 4650 :
Cisco Content Distribution Manager 4630 :
Cisco Content Distribution Manager 4630 4.0:
Cisco Content Distribution Manager 4630 4.1:
Cisco Content Distribution Manager 4650 :
Cisco Content Distribution Manager 4650 4.0:
Cisco Content Distribution Manager 4650 4.1:
Cisco Content Distribution Manager 4670 :
Cisco Content Engine 507 :
Cisco Content Engine 507 2.2 .0:
Cisco Content Engine 507 3.1:
Cisco Content Engine 507 4.0:
Cisco Content Engine 507 4.1:
Cisco Content Engine 560 :
Cisco Content Engine 560 2.2 .0:
Cisco Content Engine 560 3.1:
Cisco Content Engine 560 4.0:
Cisco Content Engine 560 4.1:
Cisco Content Engine 590 :
Cisco Content Engine 590 2.2 .0:
Cisco Content Engine 590 3.1:
Cisco Content Engine 590 4.0:
Cisco Content Engine 590 4.1:
Cisco Content Engine 7320 :
Cisco Content Engine 7320 2.2 .0:
Cisco Content Engine 7320 3.1:
Cisco Content Engine 7320 4.0:
Cisco Content Engine 7320 4.1:
Cisco Content Router 4430 :
Cisco Content Router 4430 4.0:
Cisco Content Router 4430 4.1:
Cisco Content Router 4450 :
Cisco CR-4430-B :
Cisco CSM :
Cisco CSS11000 Content Services Switch :
Cisco CSS11050 Content Services Switch :
Cisco CSS11150 Content Services Switch :
Cisco CSS11500 Content Services Switch :
Cisco CSS11800 Content Services Switch :
Cisco Device Fault Manager :
Cisco Element Management Framework :
Cisco ESCON Channel Port Adapter (ECPA) :
Cisco FastHub 300 :
Cisco FastHub 400 1.0:
Cisco FWSM for Cisco Catalyst 6500/7600 Series :
Cisco GSS 4480 Global Site Selector :
Cisco GSS 4490 Global Site Selector :
Cisco Hosting Solution Engine 1.0:
Cisco Hosting Solution Engine 1.3:
Cisco IGX 8400 :
Cisco InfoCenter :
Cisco Intelligent Contact Manager :
Cisco Intelligent Contact Manager 5.0:
Cisco Internet CDN Content Engine 590 :
Cisco Internet CDN Content Engine 7320 :
Cisco IOS 11.1 CC:
Cisco IOS 11.1 AA:
Cisco IOS 11.1:
Cisco IOS 11.2 SA:
Cisco IOS 11.2 P:
Cisco IOS 11.2:
Cisco IOS 11.3:
Cisco IOS 12.0 XV:
Cisco IOS 12.0 XU:
Cisco IOS 12.0 XS:
Cisco IOS 12.0 XR:
Cisco IOS 12.0 XQ:
Cisco IOS 12.0 XP:
Cisco IOS 12.0 XN:
Cisco IOS 12.0 XM:
Cisco IOS 12.0 XL:
Cisco IOS 12.0 XK:
Cisco IOS 12.0 XJ:
Cisco IOS 12.0 XI:
Cisco IOS 12.0 XH:
Cisco IOS 12.0 XG:
Cisco IOS 12.0 XE:
Cisco IOS 12.0 XD:
Cisco IOS 12.0 XC:
Cisco IOS 12.0 XB:
Cisco IOS 12.0 XA:
Cisco IOS 12.0 WX:
Cisco IOS 12.0 WT:
Cisco IOS 12.0 WC:
Cisco IOS 12.0 W5:
Cisco IOS 12.0 T:
Cisco IOS 12.0 SZ:
Cisco IOS 12.0 SX:
Cisco IOS 12.0 ST:
Cisco IOS 12.0 SL:
Cisco IOS 12.0 S:
Cisco IOS 12.0 DC:
Cisco IOS 12.0 DB:
Cisco IOS 12.0 DA:
Cisco IOS 12.0:
Cisco IOS 12.1 YJ:
Cisco IOS 12.1 YI:
Cisco IOS 12.1 YH:
Cisco IOS 12.1 YF:
Cisco IOS 12.1 YE:
Cisco IOS 12.1 YD:
Cisco IOS 12.1 YC:
Cisco IOS 12.1 YB:
Cisco IOS 12.1 YA:
Cisco IOS 12.1 XV:
Cisco IOS 12.1 XU:
Cisco IOS 12.1 XT:
Cisco IOS 12.1 XR:
Cisco IOS 12.1 XQ:
Cisco IOS 12.1 XP:
Cisco IOS 12.1 XM:
Cisco IOS 12.1 XL:
Cisco IOS 12.1 XJ:
Cisco IOS 12.1 XI:
Cisco IOS 12.1 XH:
Cisco IOS 12.1 XG:
Cisco IOS 12.1 XF:
Cisco IOS 12.1 XE:
Cisco IOS 12.1 XD:
Cisco IOS 12.1 XC:
Cisco IOS 12.1 XB:
Cisco IOS 12.1 XA:
Cisco IOS 12.1 T:
Cisco IOS 12.1 EY:
Cisco IOS 12.1 EX:
Cisco IOS 12.1 EW:
Cisco IOS 12.1 EV:
Cisco IOS 12.1 EU:
Cisco IOS 12.1 EO:
Cisco IOS 12.1 EC:
Cisco IOS 12.1 EB:
Cisco IOS 12.1 EA:
Cisco IOS 12.1 E:
Cisco IOS 12.1 DB:
Cisco IOS 12.1 DA:
Cisco IOS 12.1 AY:
Cisco IOS 12.1 AX:
Cisco IOS 12.1 AA:
Cisco IOS 12.1:
Cisco IOS 12.2 ZP:
Cisco IOS 12.2 ZN:
Cisco IOS 12.2 ZL:
Cisco IOS 12.2 ZK:
Cisco IOS 12.2 ZJ:
Cisco IOS 12.2 ZI:
Cisco IOS 12.2 ZH:
Cisco IOS 12.2 ZG:
Cisco IOS 12.2 ZF:
Cisco IOS 12.2 ZE:
Cisco IOS 12.2 ZD:
Cisco IOS 12.2 ZC:
Cisco IOS 12.2 ZB:
Cisco IOS 12.2 ZA:
Cisco IOS 12.2 YZ:
Cisco IOS 12.2 YY:
Cisco IOS 12.2 YX:
Cisco IOS 12.2 YW:
Cisco IOS 12.2 YV:
Cisco IOS 12.2 YU:
Cisco IOS 12.2 YT:
Cisco IOS 12.2 YS:
Cisco IOS 12.2 YR:
Cisco IOS 12.2 YQ:
Cisco IOS 12.2 YP:
Cisco IOS 12.2 YO:
Cisco IOS 12.2 YN:
Cisco IOS 12.2 YM:
Cisco IOS 12.2 YL:
Cisco IOS 12.2 YK:
Cisco IOS 12.2 YJ:
Cisco IOS 12.2 YH:
Cisco IOS 12.2 YG:
Cisco IOS 12.2 YF:
Cisco IOS 12.2 YE:
Cisco IOS 12.2 YD:
Cisco IOS 12.2 YC:
Cisco IOS 12.2 YB:
Cisco IOS 12.2 YA:
Cisco IOS 12.2 XW:
Cisco IOS 12.2 XU:
Cisco IOS 12.2 XT:
Cisco IOS 12.2 XS:
Cisco IOS 12.2 XQ:
Cisco IOS 12.2 XN:
Cisco IOS 12.2 XM:
Cisco IOS 12.2 XL:
Cisco IOS 12.2 XK:
Cisco IOS 12.2 XJ:
Cisco IOS 12.2 XI:
Cisco IOS 12.2 XH:
Cisco IOS 12.2 XG:
Cisco IOS 12.2 XF:
Cisco IOS 12.2 XE:
Cisco IOS 12.2 XD:
Cisco IOS 12.2 XC:
Cisco IOS 12.2 XB:
Cisco IOS 12.2 XA:
Cisco IOS 12.2 T:
Cisco IOS 12.2 SZ:
Cisco IOS 12.2 SY:
Cisco IOS 12.2 SXB:
Cisco IOS 12.2 SXA:
Cisco IOS 12.2 SX:
Cisco IOS 12.2 SW:
Cisco IOS 12.2 SE:
Cisco IOS 12.2 S:
Cisco IOS 12.2 MC:
Cisco IOS 12.2 JA:
Cisco IOS 12.2 EW:
Cisco IOS 12.2 DX:
Cisco IOS 12.2 DD:
Cisco IOS 12.2 CX:
Cisco IOS 12.2 BZ:
Cisco IOS 12.2 BY:
Cisco IOS 12.2 BX:
Cisco IOS 12.2 BW:
Cisco IOS 12.2 BC:
Cisco IOS 12.2 B:
Cisco IOS 12.2:
Cisco IOS 12.3 XQ:
Cisco IOS 12.3 XN:
Cisco IOS 12.3 XM:
Cisco IOS 12.3 XL:
Cisco IOS 12.3 XK:
Cisco IOS 12.3 XJ:
Cisco IOS 12.3 XI:
Cisco IOS 12.3 XH:
Cisco IOS 12.3 XG:
Cisco IOS 12.3 XF:
Cisco IOS 12.3 XE:
Cisco IOS 12.3 XD:
Cisco IOS 12.3 XC:
Cisco IOS 12.3 XB:
Cisco IOS 12.3 XA:
Cisco IOS 12.3 T:
Cisco IOS 12.3 BW:
Cisco IOS 12.3 B:
Cisco IOS 12.3:
Cisco IP Phone 7905 :
Cisco IP Phone 7940 :
Cisco IP Phone 7960 :
Cisco IP/TV Server :
Cisco LightStream 100 ATM Switches :
Cisco LightStream 1010 :
Cisco Local Director :
Cisco MDS 9000 :
Cisco MDS 9000 1.3 (3.33):
Cisco MDS 9000 2.0 (0.86):
Cisco ME1100 :
Cisco MGX :
Cisco MGX 8230 1.2.10:
Cisco MGX 8230 1.2.10:
Cisco MGX 8230 1.2.11:
Cisco MGX 8250 1.2.10:
Cisco MGX 8250 1.2.10:
Cisco MGX 8250 1.2.11:
Cisco MGX 8830 :
Cisco MGX 8850 :
Cisco MGX 8850 - PXM1 1.2.10:
Cisco MGX 8850 - PXM1 1.2.10:
Cisco MGX 8850 - PXM1 1.2.11:
Cisco MGX-8220 :
Cisco MGX-8240 :
Cisco MGX-8260 :
Cisco MGX-8850 R1 :
Cisco MGX-8850 R2 :
Cisco MicroHub 1500 :
Cisco MicroSwitch 1538 :
Cisco MicroSwitch 1548 :
Cisco ONS 15190 IP Transport Concentrator :
Cisco ONS 15194 IP Transport Concentrator :
Cisco ONS 15327 3.0:
Cisco ONS 15327 3.1:
Cisco ONS 15327 3.2:
Cisco ONS 15327 3.3:
Cisco ONS 15327 3.4:
Cisco ONS 15327 4.0 (2):
Cisco ONS 15327 4.0 (1):
Cisco ONS 15327 4.0:
Cisco ONS 15327 4.1 (3):
Cisco ONS 15327 4.1 (2):
Cisco ONS 15327 4.1 (1):
Cisco ONS 15327 4.1 (0):
Cisco ONS 15454 Optical Transport Platform 3.0:
Cisco ONS 15454 Optical Transport Platform 3.1 .0:
Cisco ONS 15454 Optical Transport Platform 3.2 .0:
Cisco ONS 15454 Optical Transport Platform 3.3:
Cisco ONS 15454 Optical Transport Platform 3.4:
Cisco ONS 15454 Optical Transport Platform 4.0 (2):
Cisco ONS 15454 Optical Transport Platform 4.0 (1):
Cisco ONS 15454 Optical Transport Platform 4.0:
Cisco ONS 15454 Optical Transport Platform 4.1 (3):
Cisco ONS 15454 Optical Transport Platform 4.1 (2):
Cisco ONS 15454 Optical Transport Platform 4.1 (1):
Cisco ONS 15454 Optical Transport Platform 4.1 (0):
Cisco ONS 15454 Optical Transport Platform 4.1:
Cisco ONS 15531 T31 OMDS Metro WDM System :
Cisco ONS 15532 T31 OMDS Metro WDM System :
Cisco ONS 15800 Dense Wave Division MuX Platform :
Cisco ONS 15801 Dense Wave Division MuX Platform :
Cisco ONS 15808 Dense Wave Division MuX Platform :
Cisco ONS 15830 T30 Optical Amplification System :
Cisco ONS 15831 T31 DWDM System :
Cisco ONS 15832 T31 DWDM System :
Cisco ONS 15863 T31 Submarine WDM System :
Cisco Parallel Channel Port Adapter (PCPA) :
Cisco PIX Firewall 6.0 (4.101):
Cisco PIX Firewall 6.0 (4):
Cisco PIX Firewall 6.0 (2):
Cisco PIX Firewall 6.0 (1):
Cisco PIX Firewall 6.0:
Cisco PIX Firewall 6.0.3:
Cisco PIX Firewall 6.0.4:
Cisco PIX Firewall 6.1 (5):
Cisco PIX Firewall 6.1 (4):
Cisco PIX Firewall 6.1 (3):
Cisco PIX Firewall 6.1 (2):
Cisco PIX Firewall 6.1 (1):
Cisco PIX Firewall 6.1:
Cisco PIX Firewall 6.1.3:
Cisco PIX Firewall 6.1.4:
Cisco PIX Firewall 6.1.5:
Cisco PIX Firewall 6.2 (3.100):
Cisco PIX Firewall 6.2 (3):
Cisco PIX Firewall 6.2 (2):
Cisco PIX Firewall 6.2 (1):
Cisco PIX Firewall 6.2:
Cisco PIX Firewall 6.2.1:
Cisco PIX Firewall 6.2.2 .111:
Cisco PIX Firewall 6.2.2:
Cisco PIX Firewall 6.2.3:
Cisco PIX Firewall 6.3 (3.109):
Cisco PIX Firewall 6.3 (3.102):
Cisco PIX Firewall 6.3 (1):
Cisco PIX Firewall 6.3:
Cisco PIX Firewall 6.3.1:
Cisco RTM :
Cisco Secure Intrusion Detection System (NetRanger) :
Cisco Secure PIX Firewall :
Cisco SN 5420 Storage Router 1.1 (7):
Cisco SN 5420 Storage Router 1.1 (5):
Cisco SN 5420 Storage Router 1.1 (4):
Cisco SN 5420 Storage Router 1.1 (3):
Cisco SN 5420 Storage Router 1.1 (2):
Cisco SN 5420 Storage Router 1.1.3:
Cisco SN 5428 Storage Router SN5428-3.3.2-K9:
Cisco SN 5428 Storage Router SN5428-3.3.1-K9:
Cisco SN 5428 Storage Router SN5428-3.2.2-K9:
Cisco SN 5428 Storage Router SN5428-3.2.1-K9:
Cisco SN 5428 Storage Router SN5428-2.5.1-K9:
Cisco SN 5428 Storage Router SN5428-2-3.3.2-K9:
Cisco SN 5428 Storage Router SN5428-2-3.3.1-K9:
Cisco SN5400 series storage routers :
Cisco SwitchProbe 3.1:
Cisco SwitchProbe 4.1:
Cisco SwitchProbe 4.2:
Cisco SwitchProbe 4.5:
Cisco SwitchProbe 4.6:
Cisco SwitchProbe 4.7:
Cisco SwitchProbe 5.1:
Cisco Traffic Director :
Cisco Unity Server :
Cisco Unity Server 2.0:
Cisco Unity Server 2.1:
Cisco Unity Server 2.2:
Cisco Unity Server 2.3:
Cisco Unity Server 2.4:
Cisco Unity Server 2.46:
Cisco Unity Server 3.0:
Cisco Unity Server 3.1:
Cisco Unity Server 3.2:
Cisco Unity Server 3.3:
Cisco Unity Server 4.0:
Cisco User Registration Tool VLAN Policy Server :
Cisco VG248 Analog Phone Gateway :
Cisco Voice Manager :
Cisco VPN 5001 Concentrator :
Cisco VPN 5002 Concentrator :
Cisco VPN 5008 Concentrator :
Cisco WAN Manager :
Cisco WGB340 :
Cisco Wireless LAN Solution Appliance :
Cisco Wireless Lan Solution Engine :
Cisco ws-x6608 :
Cisco ws-x6624 :
Cray UNICOS 6.0 E:
Cray UNICOS 6.0:
Cray UNICOS 6.1:
Cray UNICOS 7.0:
Cray UNICOS 8.0:
Cray UNICOS 8.3:
Cray UNICOS 9.0:
Cray UNICOS 9.0.2 .5:
Cray UNICOS 9.2 .4:
Cray UNICOS 9.2:
Cray UNICOS MAX 1.3 .5:
Cray UNICOS MAX 1.3:
Cray UNICOS/mk 1.5:
Cray UNICOS/mk 1.5.1:
Cray UNICOS/mk 2.0.5 .54:
Cray UNICOS/mp :
Cray UNICOS/mp 2.3:
HP AdvanceStack 10Base-T Switching Hub J3200A A.03.07:
HP AdvanceStack 10Base-T Switching Hub J3201A A.03.07:
HP AdvanceStack 10Base-T Switching Hub J3202A A.03.07:
HP AdvanceStack 10Base-T Switching Hub J3203A A.03.07:
HP AdvanceStack 10Base-T Switching Hub J3204A A.03.07:
HP AdvanceStack 10Base-T Switching Hub J3205A A.03.07:
HP AdvanceStack 10Base-T Switching Hub J3210A A.03.07:
HP Advancestack Switch 800T J3245A:
HP EtherTwist :
HP Procurve Switch 1600M :
HP Procurve Switch 2400M :
HP ProCurve Switch 2400M J4122A :
HP Procurve Switch 2424M :
HP ProCurve Switch 2424M J4093A :
HP Procurve Switch 2512 :
HP Procurve Switch 2524 :
HP ProCurve Switch 2524 J4813A :
HP Procurve Switch 2525 :
HP Procurve Switch 4000M :
HP ProCurve Switch 4000M J4121A :
HP Procurve Switch 4108GL :
HP ProCurve Switch 4108GL J4865A :
HP Procurve Switch 4108GL-bundle :
HP ProCurve Switch 5304XL J4850A :
HP ProCurve Switch 5308XL J4819A :
HP ProCurve Switch 5348XL J4849A :
HP ProCurve Switch 5372XL J4848A :
HP Procurve Switch 8000M :
HP ProCurve Switch 9304M :
HP ProCurve Switch 9308M :
HP ProCurve Switch 9315M :
IETF RFC 1323: TCP Extensions for High Performance :
IETF RFC 793: TCP :
InterNiche NicheLite 2.0:
InterNiche NicheStack 2.0:
Juniper Networks E-series Router :
Juniper Networks M-series Router M5:
Juniper Networks M-series Router M40e:
Juniper Networks M-series Router M40:
Juniper Networks M-series Router M20:
Juniper Networks M-series Router M160:
Juniper Networks M-series Router M10:
Juniper Networks T-series Router T640:
Juniper Networks T-series Router T320:
NetBSD NetBSD 1.5:
NetBSD NetBSD 1.5.1:
NetBSD NetBSD 1.5.2:
NetBSD NetBSD 1.5.3:
NetBSD NetBSD 1.6 beta:
NetBSD NetBSD 1.6:
NetBSD NetBSD 1.6.1:
NetBSD NetBSD 1.6.2:
NetBSD NetBSD 2.0:
NetScreen ScreenOS 1.7:
NetScreen ScreenOS 1.64:
NetScreen ScreenOS 1.66 r2:
NetScreen ScreenOS 1.66:
NetScreen ScreenOS 1.73 r2:
NetScreen ScreenOS 1.73 r1:
NetScreen ScreenOS 2.0.1 r8:
NetScreen ScreenOS 2.1 r7:
NetScreen ScreenOS 2.1 r6:
NetScreen ScreenOS 2.1:
NetScreen ScreenOS 2.5 r6:
NetScreen ScreenOS 2.5 r2:
NetScreen ScreenOS 2.5 r1:
NetScreen ScreenOS 2.5:
NetScreen ScreenOS 2.6:
NetScreen ScreenOS 2.6.1 r9:
NetScreen ScreenOS 2.6.1 r8:
NetScreen ScreenOS 2.6.1 r7:
NetScreen ScreenOS 2.6.1 r6:
NetScreen ScreenOS 2.6.1 r5:
NetScreen ScreenOS 2.6.1 r4:
NetScreen ScreenOS 2.6.1 r3:
NetScreen ScreenOS 2.6.1 r2:
NetScreen ScreenOS 2.6.1 r12:
NetScreen ScreenOS 2.6.1 r11:
NetScreen ScreenOS 2.6.1 r10:
NetScreen ScreenOS 2.6.1 r1:
NetScreen ScreenOS 2.6.1:
NetScreen ScreenOS 2.7.1 r3:
NetScreen ScreenOS 2.7.1 r2:
NetScreen ScreenOS 2.7.1 r1:
NetScreen ScreenOS 2.7.1:
NetScreen ScreenOS 2.8 r1:
NetScreen ScreenOS 2.8:
NetScreen ScreenOS 2.10 r4:
NetScreen ScreenOS 2.10 r3:
NetScreen ScreenOS 3.0 r4:
NetScreen ScreenOS 3.0 r3:
NetScreen ScreenOS 3.0 r2:
NetScreen ScreenOS 3.0 r1:
NetScreen ScreenOS 3.0:
NetScreen ScreenOS 3.0.1 r7:
NetScreen ScreenOS 3.0.1 r6:
NetScreen ScreenOS 3.0.1 r5:
NetScreen ScreenOS 3.0.1 r4:
NetScreen ScreenOS 3.0.1 r3:
NetScreen ScreenOS 3.0.1 r2:
NetScreen ScreenOS 3.0.1 r1:
NetScreen ScreenOS 3.0.1:
NetScreen ScreenOS 3.0.2:
NetScreen ScreenOS 3.0.3 r8:
NetScreen ScreenOS 3.0.3 r7:
NetScreen ScreenOS 3.0.3 r6:
NetScreen ScreenOS 3.0.3 r5:
NetScreen ScreenOS 3.0.3 r4:
NetScreen ScreenOS 3.0.3 r3:
NetScreen ScreenOS 3.0.3 r2:
NetScreen ScreenOS 3.0.3 r1.1:
NetScreen ScreenOS 3.0.3 r1:
NetScreen ScreenOS 3.0.3:
NetScreen ScreenOS 3.1 r9:
NetScreen ScreenOS 3.1 r8:
NetScreen ScreenOS 3.1 r7:
NetScreen ScreenOS 3.1 r6:
NetScreen ScreenOS 3.1 r5:
NetScreen ScreenOS 3.1 r4:
NetScreen ScreenOS 3.1 r3:
NetScreen ScreenOS 3.1 r2:
NetScreen ScreenOS 3.1 r12:
NetScreen ScreenOS 3.1 r11:
NetScreen ScreenOS 3.1 r10:
NetScreen ScreenOS 3.1 r1:
NetScreen ScreenOS 3.1:
NetScreen ScreenOS 3.1.1 r2:
NetScreen ScreenOS 4.0 r9:
NetScreen ScreenOS 4.0 r8:
NetScreen ScreenOS 4.0 r7:
NetScreen ScreenOS 4.0 r6:
NetScreen ScreenOS 4.0 r5:
NetScreen ScreenOS 4.0 r4:
NetScreen ScreenOS 4.0 r3:
NetScreen ScreenOS 4.0 r2:
NetScreen ScreenOS 4.0 r12:
NetScreen ScreenOS 4.0 r11:
NetScreen ScreenOS 4.0 r10:
NetScreen ScreenOS 4.0 r1:
NetScreen ScreenOS 4.0 -DIAL:
NetScreen ScreenOS 4.0:
NetScreen ScreenOS 4.0.1 r9:
NetScreen ScreenOS 4.0.1 r8:
NetScreen ScreenOS 4.0.1 r7:
NetScreen ScreenOS 4.0.1 r6:
NetScreen ScreenOS 4.0.1 r5:
NetScreen ScreenOS 4.0.1 r4:
NetScreen ScreenOS 4.0.1 r3:
NetScreen ScreenOS 4.0.1 r2:
NetScreen ScreenOS 4.0.1 r10:
NetScreen ScreenOS 4.0.1 r1:
NetScreen ScreenOS 4.0.1:
NetScreen ScreenOS 4.0.2:
NetScreen ScreenOS 4.0.3 r4:
NetScreen ScreenOS 4.0.3 r3:
NetScreen ScreenOS 4.0.3 r2:
NetScreen ScreenOS 4.0.3 r1:
NetScreen ScreenOS 4.0.3:
NetScreen ScreenOS 5.0:
SEIL neu 128 ("Ver.1" series) 1.89:
SEIL neu 128 ("Ver.2" series) 2.21:
SEIL neu 2FE ("Ver.1" series) 1.89:
SEIL neu 2FE ("Ver.2" series) 2.21:
SEIL neu 2FE Plus 1.9:
SEIL neu ATM 1.35:
SEIL neu T1 ("Ver.1" series) 1.89:
SEIL neu T1 ("Ver.2" series) 2.21:
SEIL Turbo 1.18:
SGI IRIX 6.5.22:

SGI Patch 5738
ftp://patches.sgi.com/support/free/security/patches/6.5.22/patch5738.tar

SGI IRIX 6.5.23:
SGI Patch 5737
ftp://patches.sgi.com/support/free/security/patches/6.5.23/patch5737.tar

SGI IRIX 6.5.24:
SGI Patch 5728
ftp://patches.sgi.com/support/free/security/patches/6.5.24/patch5728.tar

SGI IRIX 6.5.25:
SGI Patch 5729
ftp://patches.sgi.com/support/free/security/patches/6.5.25/patch5729.tar

References
Source: NetBSD 2004-006 TCP protocol and implementation vulnerability
URL: http://online.securityfocus.com/advisories/6610

Source: SGI 20040403-01-A Vulnerabilities in long-lived TCP connections
URL: http://online.securityfocus.com/advisories/6612

Source: SGI 20040905-01-P bsd.a kernel networking vulnerabilities
URL: http://online.securityfocus.com/advisories/7256

Source: HP HPSBGN01041 SSRT4696 rev.0 HP ProCurve Routing Switches TCP Denial of Service (DoS)
URL: http://online.securityfocus.com/advisories/6753

Source: announce_en_20040421_01 : TCP protocol vulnerability in SEIL series products
URL: http://www.seil.jp/en/ann/announce_en_20040421_01.txt

Source: Cisco Security Advisory: TCP Vulnerabilities in Multiple IOS-Based Cisco Product
URL: http://www.cisco.com/warp/public/707/cisco-sa-20040420-tcp-ios.shtml

Source: Cisco Security Advisory: TCP Vulnerabilities in Multiple Non-IOS Cisco Products
URL: http://www.cisco.com/warp/public/707/cisco-sa-20040420-tcp-nonios.shtml

Source: Multiple Vendor TCP Denial of Service Vulnerability
URL: http://xforce.iss.net/xforce/alerts/id/170

Source: NISCC Vulnerability Advisory 236929
URL: http://www.uniras.gov.uk/vuls/2004/236929/index.htm

Source: Security Advisory: TCP Vulnerability CAN-2004-0230
URL: http://www.bluecoat.com/support/knowledge/advisory_tcp_can-2004-0230.html

Source: TA04-111A Vulnerabilities in TCP
URL: http://www.us-cert.gov/cas/techalerts/TA04-111A.html

Source: TCP protocol vulnerable to spoofed packets (NISCC/TCP/236929)
URL: http://www.juniper.net/support/alert.html

Source: TCP RFC Alert
URL: http://www.checkpoint.com/techsupport/alerts/tcp_dos.html

Credits
Discovery is credited to Paul A. Watson.


Copyright (c) 2004 by Symantec Corp.
Permission to redistribute this alert electronically is granted as long as it is not edited in any way unless authorized by Symantec Security Response. Reprinting the whole or part of this alert in any medium other than electronically requires permission from symsecurity@symantec.com.

Disclaimer
The information in the advisory is believed to be accurate at the time of publishing based on currently available information. Use of the information constitutes acceptance for use in an AS IS condition. There are no warranties with regard to this information. Neither the author nor the publisher accepts any liability for any direct, indirect, or consequential loss or damage arising from use of, or reliance on, this information.

Symantec, Symantec products, Symantec Security Response, and SymSecurity are registered trademarks of Symantec Corp. and/or affiliated companies in the United States and other countries. All other registered and unregistered trademarks represented in this document are the sole property of their respective companies/owners.