Description
The TCP implementation in Sun Solaris 8, 9, and 10 before 20060726 allows remote attackers to cause a denial of service (resource exhaustion) via a TCP packet with an incorrect sequence number, which triggers an ACK storm.
References
- 22425 third-party-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2006-204.htm
- oval:org.mitre.oval:def:1374 vdb-entry signature
- solaris-tcp-packet-dos(28048) vdb-entry
- 102206 vendor-advisory
- 1016589 vdb-entry
- 21226 third-party-advisory
- ADV-2006-2997 vdb-entry