Description
The TCP/IP Networking component in Mac OS X before 10.3.5 allows remote attackers to cause a denial of service (memory and resource consumption) via a "Rose Attack" that involves sending a subset of small IP fragments that do not form a complete, larger packet.
References
- macos-tcp-ip-dos(16946) vdb-entry
- APPLE-SA-2004-09-09 vendor-advisory
- 20040331 IPv4 fragmentation --> The Rose Attack mailing-list
- 20040427 Source Code To Test IPv4 fragmentation --> The Rose Attack mailing-list
- http://digital.net/~gandalf/Rose_Frag_Attack_Explained.txt