CVE-2005-0688
Windows Server 2003 and XP SP2, with Windows Firewall turned off, allows remote attackers to...
Windows Server 2003 and XP SP2, with Windows Firewall turned off, allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet with the SYN flag set and the same destination and source address and port, aka a reoccurrence of the "Land" vulnerability (CVE-1999-0016).
Exploit likelihood
What each source reports
NVD Score used
Windows Server 2003 and XP SP2, with Windows Firewall turned off, allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet with the SYN flag set and the same destination and source address and port, aka a reoccurrence of the "Land" vulnerability (CVE-1999-0016).
- Record
CVE-2005-0688- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
Windows Server 2003 and XP SP2, with Windows Firewall turned off, allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet with the SYN flag set and the same destination and source address and port, aka a reoccurrence of the "Land" vulnerability (CVE-1999-0016).
- Record
CVE-2005-0688- Updated
- 2026-11-02
EUVDEUVD-2005-0689 No score
Windows Server 2003 and XP SP2, with Windows Firewall turned off, allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet with the SYN flag set and the same destination and source address and port, aka a reoccurrence of the "Land" vulnerability (CVE-1999-0016).
- Record
EUVD-2005-0689- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4r46-5w3g-fqfc No score
Windows Server 2003 and XP SP2, with Windows Firewall turned off, allows remote attackers to...
Windows Server 2003 and XP SP2, with Windows Firewall turned off, allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet with the SYN flag set and the same destination and source address and port, aka a reoccurrence of the "Land" vulnerability (CVE-1999-0016).
- Record
GHSA-4r46-5w3g-fqfc- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Microsoft Windows XP/2003 - Remote Denial of Service | 2005-03-07 |
| Exploit-DB | Microsoft Windows - Malformed IP Options Denial of Service (MS05-019) | 2005-04-17 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-0688 is a medium vulnerability (CVSS 5.0) in Microsoft Windows 2003 Server, published March 5, 2005. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 47.4%, the 98th percentile. No source names a fixed version.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1288
securityfocus.com/archive/1/449179/100/0/threaded
docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-064