Description
Windows Server 2003 and XP SP2, with Windows Firewall turned off, allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet with the SYN flag set and the same destination and source address and port, aka a reoccurrence of the "Land" vulnerability (CVE-1999-0016).
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 2
- Microsoft Windows - Malformed IP Options Denial of Service (MS05-019) EDB-942 · dos · Apr 17, 2005 · verified
- Microsoft Windows XP/2003 - Remote Denial of Service EDB-861 · dos · Mar 7, 2005 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- oval:org.mitre.oval:def:1288 vdb-entry signature
- SSRT061264 vendor-advisory
- MS06-064 vendor-advisory
- oval:org.mitre.oval:def:1685 vdb-entry signature
- oval:org.mitre.oval:def:482 vdb-entry signature
- MS05-019 vendor-advisory
- 22341 third-party-advisory
- ADV-2006-3983 vdb-entry
- 20050305 Windows Server 2003 and XP SP2 LAND attack vulnerability mailing-list
- oval:org.mitre.oval:def:4978 vdb-entry signature