Intrusion Prevention

Multiple.Vendor.ICMP.Remote.DoS

Description

This indicates an attempt to exploit a denial-of-service vulnerability in multiple TCP/IP and ICMP implementations.
The vulnerability is caused by errors in how ICMP, TCP, and TCP/IP protocols are handled. Remote attackers may exploit this to create a denial-of-service condition.

Affected Products

Wind River Systems BSD/OS 5.0
Wind River Systems BSD/OS 4.3.1
Wind River Systems BSD/OS 4.2
WatchGuard SOHO Firewall 5.0.35
WatchGuard SOHO Firewall 5.0.31
WatchGuard SOHO Firewall 5.0.29
WatchGuard SOHO Firewall 5.0.28
WatchGuard SOHO Firewall 2.2.1
WatchGuard SOHO Firewall 2.1.3
WatchGuard SOHO Firewall 1.6
WatchGuard SOHO 2.2
WatchGuard ServerLock 2.0.4
WatchGuard ServerLock 2.0.3
WatchGuard ServerLock 2.0.2
WatchGuard ServerLock 2.0.1
WatchGuard ServerLock 2.0
WatchGuard FireboxII Firmware 4.6
WatchGuard FireboxII Firmware 4.5
WatchGuard FireboxII Firmware 4.4
WatchGuard FireboxII Firmware 4.3
WatchGuard FireboxII Firmware 4.2
WatchGuard FireboxII Firmware 4.1
WatchGuard FireboxII Firmware 4.0
WatchGuard Firebox V80
WatchGuard Firebox V60
WatchGuard Firebox V100
WatchGuard Firebox V10
WatchGuard Firebox II 4.5
WatchGuard Firebox II 4.1
WatchGuard Firebox Firmware 6.0 .b1140
WatchGuard Firebox Firmware 5.0
WatchGuard Firebox 4500 4.6
WatchGuard Firebox 4500 4.5
WatchGuard Firebox 2500 4.6
WatchGuard Firebox 2500 4.5
Symantec VelociRaptor 1300 1.5
Symantec VelociRaptor 1200 1.5
Symantec VelociRaptor 1100 1.5
Symantec Nexland Pro800turbo Firewall Appliance
Symantec Nexland Pro800 Firewall Appliance
Symantec Nexland Pro400 Firewall Appliance
Symantec Nexland Pro100 Firewall Appliance
Symantec Nexland ISB SOHO Firewall Appliance
Symantec Gateway Security 5400 2.0.1
Symantec Gateway Security 5400 2.0
Symantec Gateway Security 5310 1.0
Symantec Gateway Security 5300 1.0
Symantec Gateway Security 460R
Symantec Gateway Security 460
Symantec Gateway Security 440
Symantec Gateway Security 420
Symantec Gateway Security 360R 2.1 Build 415
Symantec Gateway Security 360R 2.1 Build 300
Symantec Gateway Security 360R
Symantec Gateway Security 360
Symantec Gateway Security 320
Symantec Firewall/VPN Appliance 200R
Symantec Firewall/VPN Appliance 200
Symantec Firewall/VPN Appliance 100
Symantec Enterprise Firewall 8.0 Solaris
Symantec Enterprise Firewall 8.0 NT/2000
Symantec Enterprise Firewall 7.0.4 Solaris
Symantec Enterprise Firewall 7.0.4 NT/2000
Symantec Enterprise Firewall 7.0 Solaris
Symantec Enterprise Firewall 7.0 NT/2000
Sun Solaris 9.0 _x86
Sun Solaris 9.0
Sun Solaris 8.0 _x86
Sun Solaris 8.0
Sun Solaris 7.0 _x86
Sun Solaris 7.0
Sun Solaris 10_x86
Sun Solaris 10
SCO Unixware 7.1.4
SCO Unixware 7.1.3
SCO Open Server 6.0
SCO Open Server 5.0.7
SCO Open Server 5.0.6
RedHat Enterprise Linux WS 3
RedHat Enterprise Linux WS 2.1 IA64
RedHat Enterprise Linux WS 2.1
RedHat Enterprise Linux ES 3
RedHat Enterprise Linux ES 2.1 IA64
RedHat Enterprise Linux ES 2.1
RedHat Enterprise Linux AS 3
RedHat Enterprise Linux AS 2.1 IA64
RedHat Enterprise Linux AS 2.1
RedHat Desktop 3.0
RedHat Advanced Workstation for the Itanium Processor 2.1 IA64
RedHat Advanced Workstation for the Itanium Processor 2.1
RedBack Networks AOS
OpenBSD OpenBSD 2.9
OpenBSD OpenBSD 2.8
OpenBSD OpenBSD 2.7
OpenBSD OpenBSD 2.6
OpenBSD OpenBSD 2.5
OpenBSD OpenBSD 2.4
OpenBSD OpenBSD 2.3
OpenBSD OpenBSD 2.2
OpenBSD OpenBSD 2.1
OpenBSD OpenBSD 2.0
OpenBSD OpenBSD 3.7
OpenBSD OpenBSD 3.6
OpenBSD OpenBSD 3.5
OpenBSD OpenBSD 3.4
OpenBSD OpenBSD 3.3
OpenBSD OpenBSD 3.2
OpenBSD OpenBSD 3.1
OpenBSD OpenBSD 3.0
Nortel Networks WLAN Access Point 7250.0
Nortel Networks WLAN Access Point 7220.0
Nortel Networks VPN Router
Nortel Networks Univity - BSSM
Nortel Networks UMTS
Nortel Networks Shasta Router
Nortel Networks Preside - MDM
Nortel Networks Passport 7000
Nortel Networks Passport 6000
Nortel Networks Passport 20000
Nortel Networks Passport 15000
Nortel Networks Passport 1100/1150/1200/1250
Nortel Networks Optivity Network Management System
Nortel Networks Optera
Nortel Networks Multiservice Access Switch 4400
Nortel Networks Multiprotocol Router Family PP5430
Nortel Networks Multiprotocol Router Family PP2430
Nortel Networks Multiprotocol Router Family BLN
Nortel Networks Multiprotocol Router Family BCN
Nortel Networks Multiprotocol Router Family ASN
Nortel Networks Multiprotocol Router Family ARN
Nortel Networks Multiprotocol Router Family ANH
Nortel Networks Multiprotocol Router Family AN
Nortel Networks GSM
Nortel Networks Ethernet Routing Switch Passport 8300
Nortel Networks Ethernet Routing Switch 8600
Nortel Networks Baystack BPS2000/460/470 Switch
Nortel Networks Baystack 5510/5520 Switch
Nortel Networks Baystack 420/425/325 Switch
Nortel Networks Baystack 380-24T Switch
Nortel Networks BayRS
Nortel Networks Application Switch
Nortel Networks Alteon Switched Firewall 5100
NetAppliance NetCache C630 3.3.1
Microsoft Windows XP Tablet PC Edition SP2
Microsoft Windows XP Tablet PC Edition SP1
Microsoft Windows XP Tablet PC Edition
Microsoft Windows XP Professional x64 Edition
Microsoft Windows XP Professional SP2
Microsoft Windows XP Professional SP1
Microsoft Windows XP Professional
Microsoft Windows XP Media Center Edition SP2
Microsoft Windows XP Media Center Edition SP1
Microsoft Windows XP Media Center Edition
Microsoft Windows XP Home SP2
Microsoft Windows XP Home SP1
Microsoft Windows XP Home
Microsoft Windows XP 64-bit Edition Version 2003 SP1
Microsoft Windows XP 64-bit Edition Version 2003
Microsoft Windows Server 2003 Web Edition SP1
Microsoft Windows Server 2003 Web Edition
Microsoft Windows Server 2003 Standard x64 Edition
Microsoft Windows Server 2003 Standard Edition SP1
Microsoft Windows Server 2003 Standard Edition
Microsoft Windows Server 2003 Enterprise x64 Edition
Microsoft Windows Server 2003 Enterprise Edition Itanium SP1
Microsoft Windows Server 2003 Enterprise Edition Itanium 0
Microsoft Windows Server 2003 Enterprise Edition SP1
Microsoft Windows Server 2003 Enterprise Edition
Microsoft Windows Server 2003 Datacenter x64 Edition
Microsoft Windows Server 2003 Datacenter Edition Itanium SP1
Microsoft Windows Server 2003 Datacenter Edition Itanium 0
Microsoft Windows Server 2003 Datacenter Edition SP1
Microsoft Windows Server 2003 Datacenter Edition
Microsoft Windows 2000 Server SP4
Microsoft Windows 2000 Server SP3
Microsoft Windows 2000 Server SP2
Microsoft Windows 2000 Server SP1
Microsoft Windows 2000 Server
Microsoft Windows 2000 Professional SP4
Microsoft Windows 2000 Professional SP3
Microsoft Windows 2000 Professional SP2
Microsoft Windows 2000 Professional SP1
Microsoft Windows 2000 Professional
Microsoft Windows 2000 Datacenter Server SP4
Microsoft Windows 2000 Datacenter Server SP3
Microsoft Windows 2000 Datacenter Server SP2
Microsoft Windows 2000 Datacenter Server SP1
Microsoft Windows 2000 Datacenter Server
Microsoft Windows 2000 Advanced Server SP4
Microsoft Windows 2000 Advanced Server SP3
Microsoft Windows 2000 Advanced Server SP2
Microsoft Windows 2000 Advanced Server SP1
Microsoft Windows 2000 Advanced Server
Juniper Networks T-series Router T640
Juniper Networks T-series Router T320
Juniper Networks M-series Router M5
Juniper Networks M-series Router M40e
Juniper Networks M-series Router M40
Juniper Networks M-series Router M20
Juniper Networks M-series Router M160
Juniper Networks M-series Router M10
IBM AIX 5.3 L
IBM AIX 5.2 L
IBM AIX 5.1 L
IBM AIX 5.3
IBM AIX 5.2
IBM AIX 5.1
HP Tru64 5.1 B-3
HP Tru64 5.1 B-2 PK4
HP Tru64 5.1 A PK
HP Tru64 4.0 G PK4
HP Tru64 4.0 F PK8
HP TOUR 2.0
HP HP-UX B.11.23
HP HP-UX B.11.22
HP HP-UX B.11.11
HP HP-UX B.11.04
HP HP-UX B.11.00
F5 BigIP 9.0.5
F5 BigIP 9.0.4
F5 BigIP 9.0.3
F5 BigIP 9.0.2
F5 BigIP 9.0.1
F5 BigIP 9.0
F5 BigIP 4.6.5
F5 BigIP 4.6.3
F5 BigIP 4.6.2
F5 BigIP 4.6
F5 BigIP 4.5.12
F5 BigIP 4.5.11
F5 BigIP 4.5.10
F5 BigIP 4.5.9
F5 BigIP 4.5.6
F5 BigIP 4.5
F5 3-DNS 4.6.3
F5 3-DNS 4.6.2
F5 3-DNS 4.6
F5 3-DNS 4.5.12
F5 3-DNS 4.5.11
F5 3-DNS 4.5
Cisco VPN 5000 Concentrator
Cisco PIX Firewall 6.3.3 (133)
Cisco PIX Firewall 6.3.2
Cisco PIX Firewall 6.3.1
Cisco PIX Firewall 6.3 (3.109)
Cisco PIX Firewall 6.3 (3.102)
Cisco PIX Firewall 6.3 (1)
Cisco PIX Firewall 6.3
Cisco PIX Firewall 6.2.3 (110)
Cisco PIX Firewall 6.2.3
Cisco PIX Firewall 6.2.2 .111
Cisco PIX Firewall 6.2.2
Cisco PIX Firewall 6.2.1
Cisco PIX Firewall 6.2 (3.100)
Cisco PIX Firewall 6.2 (3)
Cisco PIX Firewall 6.2 (2)
Cisco PIX Firewall 6.2 (1)
Cisco PIX Firewall 6.2
Cisco ONS 15454 IOS-Based Blades
Cisco ONS 15305
Cisco ONS 15302
Cisco MGX 8850 - PXM1 1.2.11
Cisco MGX 8850 - PXM1 1.2.10
Cisco MGX 8850 - PXM1 1.2.10
Cisco MGX 8850
Cisco MGX 8250 1.2.11
Cisco MGX 8250 1.2.10
Cisco MGX 8250 1.2.10
Cisco MDS 9000 2.0 (0.86)
Cisco MDS 9000 1.3 (4a)
Cisco MDS 9000 1.3 (3.33)
Cisco MDS 9000
Cisco IP Phone 7970
Cisco IP Phone 7960
Cisco IP Phone 7940
Cisco IOS XR
Cisco IOS 12.3 YQ
Cisco IOS 12.3 YN
Cisco IOS 12.3 YK
Cisco IOS 12.3 YJ
Cisco IOS 12.3 YI
Cisco IOS 12.3 YH
Cisco IOS 12.3 YG
Cisco IOS 12.3 YF
Cisco IOS 12.3 YD
Cisco IOS 12.3 YA
Cisco IOS 12.3 XY
Cisco IOS 12.3 XX
Cisco IOS 12.3 XW
Cisco IOS 12.3 XU
Cisco IOS 12.3 XT
Cisco IOS 12.3 XS
Cisco IOS 12.3 XR
Cisco IOS 12.3 XQ
Cisco IOS 12.3 XM
Cisco IOS 12.3 XL
Cisco IOS 12.3 XK
Cisco IOS 12.3 XJ
Cisco IOS 12.3 XI
Cisco IOS 12.3 XH
Cisco IOS 12.3 XG
Cisco IOS 12.3 XF
Cisco IOS 12.3 XE
Cisco IOS 12.3 XD
Cisco IOS 12.3 XC
Cisco IOS 12.3 XB
Cisco IOS 12.3 XA
Cisco IOS 12.3 T
Cisco IOS 12.3 JA
Cisco IOS 12.3 BW
Cisco IOS 12.3 BC
Cisco IOS 12.3 B
Cisco IOS 12.3
Cisco IOS 12.2 ZP
Cisco IOS 12.2 ZN
Cisco IOS 12.2 ZL
Cisco IOS 12.2 ZK
Cisco IOS 12.2 ZJ
Cisco IOS 12.2 ZH
Cisco IOS 12.2 ZG
Cisco IOS 12.2 ZF
Cisco IOS 12.2 ZE
Cisco IOS 12.2 ZD
Cisco IOS 12.2 ZC
Cisco IOS 12.2 ZB
Cisco IOS 12.2 ZA
Cisco IOS 12.2 YZ
Cisco IOS 12.2 YY
Cisco IOS 12.2 YX
Cisco IOS 12.2 YW
Cisco IOS 12.2 YV
Cisco IOS 12.2 YU
Cisco IOS 12.2 YT
Cisco IOS 12.2 YR
Cisco IOS 12.2 YQ
Cisco IOS 12.2 YO
Cisco IOS 12.2 YN
Cisco IOS 12.2 YM
Cisco IOS 12.2 YL
Cisco IOS 12.2 YK
Cisco IOS 12.2 YJ
Cisco IOS 12.2 YH
Cisco IOS 12.2 YG
Cisco IOS 12.2 YF
Cisco IOS 12.2 YE
Cisco IOS 12.2 YD
Cisco IOS 12.2 YC
Cisco IOS 12.2 YB
Cisco IOS 12.2 YA
Cisco IOS 12.2 XW
Cisco IOS 12.2 XU
Cisco IOS 12.2 XT
Cisco IOS 12.2 XR
Cisco IOS 12.2 XQ
Cisco IOS 12.2 XN
Cisco IOS 12.2 XM
Cisco IOS 12.2 XL
Cisco IOS 12.2 XK
Cisco IOS 12.2 XJ
Cisco IOS 12.2 XI
Cisco IOS 12.2 XH
Cisco IOS 12.2 XG
Cisco IOS 12.2 XF
Cisco IOS 12.2 XE
Cisco IOS 12.2 XD
Cisco IOS 12.2 XC
Cisco IOS 12.2 XB
Cisco IOS 12.2 XA
Cisco IOS 12.2 T
Cisco IOS 12.2 SZ
Cisco IOS 12.2 SY
Cisco IOS 12.2 SXD
Cisco IOS 12.2 SXB
Cisco IOS 12.2 SXA
Cisco IOS 12.2 SX
Cisco IOS 12.2 SW
Cisco IOS 12.2 SV
Cisco IOS 12.2 SU
Cisco IOS 12.2 SO
Cisco IOS 12.2 SE
Cisco IOS 12.2 S
Cisco IOS 12.2 MC
Cisco IOS 12.2 MB
Cisco IOS 12.2 JK
Cisco IOS 12.2 JA
Cisco IOS 12.2 EY
Cisco IOS 12.2 EX
Cisco IOS 12.2 EWA
Cisco IOS 12.2 EW
Cisco IOS 12.2 EU
Cisco IOS 12.2 DX
Cisco IOS 12.2 DD
Cisco IOS 12.2 DA
Cisco IOS 12.2 CZ
Cisco IOS 12.2 CY
Cisco IOS 12.2 CX
Cisco IOS 12.2 BZ
Cisco IOS 12.2 BY
Cisco IOS 12.2 BW
Cisco IOS 12.2 BC
Cisco IOS 12.2 B
Cisco IOS 12.2
Cisco IOS 12.1 YJ
Cisco IOS 12.1 YI
Cisco IOS 12.1 YH
Cisco IOS 12.1 YF
Cisco IOS 12.1 YE
Cisco IOS 12.1 YD
Cisco IOS 12.1 YC
Cisco IOS 12.1 YB
Cisco IOS 12.1 YA
Cisco IOS 12.1 XV
Cisco IOS 12.1 XU
Cisco IOS 12.1 XT
Cisco IOS 12.1 XR
Cisco IOS 12.1 XQ
Cisco IOS 12.1 XP
Cisco IOS 12.1 XM
Cisco IOS 12.1 XL
Cisco IOS 12.1 XJ
Cisco IOS 12.1 XI
Cisco IOS 12.1 XH
Cisco IOS 12.1 XG
Cisco IOS 12.1 XF
Cisco IOS 12.1 XE
Cisco IOS 12.1 XD
Cisco IOS 12.1 XC
Cisco IOS 12.1 XB
Cisco IOS 12.1 XA
Cisco IOS 12.1 T
Cisco IOS 12.1 EY
Cisco IOS 12.1 EX
Cisco IOS 12.1 EW
Cisco IOS 12.1 EV
Cisco IOS 12.1 EU
Cisco IOS 12.1 EO
Cisco IOS 12.1 EC
Cisco IOS 12.1 EB
Cisco IOS 12.1 EA
Cisco IOS 12.1 E
Cisco IOS 12.1 DC
Cisco IOS 12.1 DB
Cisco IOS 12.1 DA
Cisco IOS 12.1 AZ
Cisco IOS 12.1 AX
Cisco IOS 12.1 AA
Cisco IOS 12.1
Cisco IOS 12.0 XV
Cisco IOS 12.0 XS
Cisco IOS 12.0 XR
Cisco IOS 12.0 XQ
Cisco IOS 12.0 XN
Cisco IOS 12.0 XM
Cisco IOS 12.0 XL
Cisco IOS 12.0 XK
Cisco IOS 12.0 XJ
Cisco IOS 12.0 XI
Cisco IOS 12.0 XH
Cisco IOS 12.0 XG
Cisco IOS 12.0 XF
Cisco IOS 12.0 XE
Cisco IOS 12.0 XD
Cisco IOS 12.0 XC
Cisco IOS 12.0 XB
Cisco IOS 12.0 XA
Cisco IOS 12.0 WC
Cisco IOS 12.0 W5
Cisco IOS 12.0 T
Cisco IOS 12.0 SZ
Cisco IOS 12.0 SX
Cisco IOS 12.0 ST
Cisco IOS 12.0 SP
Cisco IOS 12.0 SL
Cisco IOS 12.0 SC
Cisco IOS 12.0 S
Cisco IOS 12.0 DC
Cisco IOS 12.0 DB
Cisco IOS 12.0 DA
Cisco IOS 12.0
Cisco GSS 4490 Global Site Selector
Cisco GSS 4480 Global Site Selector
Cisco CSS11500 Content Services Switch
Cisco CSS11000 Content Services Switch
Cisco CSM
Cisco Catalyst 6624
Cisco Catalyst 6608
Cisco 6608
Blue Coat Systems Spyware Interceptor
Blue Coat Systems SGOS 4.1.1
Blue Coat Systems SGOS 3.2.4
Blue Coat Systems SGOS 2.1.11
Blue Coat Systems SGME
Blue Coat Systems CacheOS
Avaya Modular Messaging (MAS) 3.0
ALAXALA Networks AX7800S
ALAXALA Networks AX7800R
ALAXALA Networks AX5400S

Impact

Denial of service.

Recommended Actions

Apply the appropriate patches.
Microsoft Windows Server 2003 Datacenter Edition SP1
* Microsoft Security Update for Windows Server 2003 (KB922819)
http://www.microsoft.com/downloads/details.aspx?familyid=102591a0-2b58 -497b-bc20-593571b96e9c
IBM AIX 5.1
* IBM IY70028
http://www-1.ibm.com/servers/eserver/support/pseries/aixfixes.html
* IBM icmp_efix.tar.Z
ftp://aix.software.ibm.com/aix/efixes/security/icmp_efix.tar.Z
* IBM IY70028
http://www-1.ibm.com/support/docview.wss?uid=isg1IY70028
Microsoft Windows Server 2003 Standard Edition SP1
* Microsoft Security Update for Windows Server 2003 (KB922819)
http://www.microsoft.com/downloads/details.aspx?familyid=102591a0-2b58 -497b-bc20-593571b96e9c
Microsoft Windows Server 2003 Standard Edition
* Microsoft Security Update for Windows Server 2003 (KB922819)
http://www.microsoft.com/downloads/details.aspx?familyid=102591a0-2b58 -497b-bc20-593571b96e9c
* Microsoft Security Update for Windows Server 2003 (KB893066)
http://www.microsoft.com/downloads/details.aspx?familyid=F1F9A44F-D4F1 -4EF8-83F7-737DF6CC292E&displaylang=en
Microsoft Windows Server 2003 Enterprise x64 Edition
* Microsoft Security Update for Windows Server 2003 x64 Edition (KB922819)
http://www.microsoft.com/downloads/details.aspx?familyid=c5faba34-48f5 -4875-a0fa-6b8207f9b276
Microsoft Windows XP Professional
* Microsoft Security Update for Windows XP (KB893066)
http://www.microsoft.com/downloads/details.aspx?familyid=81049A86-6F39 -4A27-A643-391262785CF3&displaylang=en
Microsoft Windows Server 2003 Datacenter Edition Itanium 0
* Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB922819)
http://www.microsoft.com/downloads/details.aspx?familyid=12515d47-134d -4d1f-9ae7-f0a7167ec424
* Microsoft Security Update for Windows Server 2003 64-bit Edition and Windows XP 64-bit Edition, Version 20
http://www.microsoft.com/downloads/details.aspx?familyid=AC019224-82BE -4263-B977-02D4DC6C9FF6&displaylang=en
F5 3-DNS 4.5
* F5 bigip_VU-222750.txt
ftp://ftp.f5.com/Domestic/bigip/vu222750/bigip_VU-222750.txt
F5 BigIP 4.5.11
* F5 bigip_VU-222750.txt
ftp://ftp.f5.com/Domestic/bigip/vu222750/bigip_VU-222750.txt
F5 3-DNS 4.6
* F5 bigip_VU-222750.txt
ftp://ftp.f5.com/Domestic/bigip/vu222750/bigip_VU-222750.txt
IBM AIX 5.2 L
* IBM IY70027
http://www-1.ibm.com/servers/eserver/support/pseries/aixfixes.html
* IBM icmp_efix.tar.Z
ftp://aix.software.ibm.com/aix/efixes/security/icmp_efix.tar.Z
F5 BigIP 9.0.1
* F5 BIG-IP_9_Instructions.txt
ftp://ftp.f5.com/Domestic/bigip/vu222750/BIG-IP_9_Instructions.txt
F5 BigIP 9.0.2
* F5 BIG-IP_9_Instructions.txt
ftp://ftp.f5.com/Domestic/bigip/vu222750/BIG-IP_9_Instructions.txt

CVE References

CVE-2004-0790