Description
HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allows remote attackers to cause a denial of service via a "Rose Attack" that involves sending a subset of small IP fragments that do not form a complete, larger packet.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 4
- Microsoft Windows XP - TCP Packet Fragmentation Handling Denial of Service (1) EDB-24634 · dos · Sep 27, 2004 · verified
- Microsoft Windows XP - TCP Packet Fragmentation Handling Denial of Service (2) EDB-24635 · dos · Sep 27, 2004 · verified
- Microsoft Windows XP - TCP Packet Fragmentation Handling Denial of Service (3) EDB-24636 · dos · Sep 27, 2004 · verified
- Microsoft Windows XP - TCP Packet Fragmentation Handling Denial of Service (4) EDB-24637 · dos · Sep 27, 2004 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 1015361 vdb-entry
- ADV-2005-2945 vdb-entry
- SSRT4728 vendor-advisory
- 20040927 IPv4 fragmentation --> The Rose Attack mailing-list
- 19086 third-party-advisory
- 18082 third-party-advisory
- 11258 vdb-entry
- oval:org.mitre.oval:def:5760 vdb-entry signature
- http://support.avaya.com/elmodocs2/security/ASA-2006-062.htm