CVE-2005-0356
Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the...
Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard later packets because they appear to be too old.
Exploit likelihood
What each source reports
NVD Score used
Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard later packets because they appear to be too old.
- Record
CVE-2005-0356- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard later packets because they appear to be too old.
- Record
CVE-2005-0356- Updated
- 2026-11-02
EUVDEUVD-2005-0357 No score
Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard later packets because they appear to be too old.
- Record
EUVD-2005-0357- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r6gj-g9qf-3c55 No score
Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the...
Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard later packets because they appear to be too old.
- Record
GHSA-r6gj-g9qf-3c55- Updated
- 2026-11-02
Affected products
- alaxala networks
- cisco agent desktop
- cisco aironet ap1200
- cisco aironet ap350
- cisco call manager
- cisco ciscoworks 1105 hosting solution engine
- cisco ciscoworks 1105 wireless lan solution engine
- cisco ciscoworks access control list manager
- cisco ciscoworks cd1
- cisco ciscoworks common management foundation
- cisco ciscoworks common services
- cisco ciscoworks lms
Show 64 moreShow less
- cisco ciscoworks vpn security management solution
- cisco ciscoworks windows
- cisco ciscoworks windows wug
- cisco conference connection
- cisco content services switch 11000
- cisco content services switch 11050
- cisco content services switch 11150
- cisco content services switch 11500
- cisco content services switch 11501
- cisco content services switch 11503
- cisco content services switch 11506
- cisco content services switch 11800
- cisco e-mail manager
- cisco emergency responder
- cisco intelligent contact manager
- cisco interactive voice response
- cisco ip contact center enterprise
- cisco ip contact center express
- cisco meetingplace
- cisco mgx 8230
- cisco mgx 8250
- cisco personal assistant
- cisco remote monitoring suite option
- cisco secure access control server
- cisco sn 5420 storage router
- cisco sn 5420 storage router firmware
- cisco sn 5428 storage router
- cisco support tools
- cisco unity server
- cisco web collaboration option
- cisco webns
- f5 tmos
- freebsd
- hitachi alaxala
- hitachi gr3000
- hitachi gr4000
- hitachi gs4000
- microsoft windows 2000
- microsoft windows 2003 server
- microsoft windows xp
- nortel 7220 wlan access point
- nortel 7250 wlan access point
- nortel business communications manager
- nortel callpilot
- nortel contact center
- nortel ethernet routing switch 1612
- nortel ethernet routing switch 1624
- nortel ethernet routing switch 1648
- nortel optical metro 5000
- nortel optical metro 5100
- nortel optical metro 5200
- nortel succession communication server 1000
- nortel survivable remote gateway
- nortel universal signaling point
- openbsd
- yamaha rt105
- yamaha rt250i
- yamaha rt300i
- yamaha rt57i
- yamaha rtv700
- yamaha rtx1000
- yamaha rtx1100
- yamaha rtx1500
- yamaha rtx2000
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | TCP TIMESTAMPS - Denial of Service | 2005-05-21 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-0356 is a medium vulnerability (CVSS 5.0) in Alaxala Networks, published May 31, 2005. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 82.8%, the 99th percentile. No source names a fixed version.