Every CVE Search/ Get API key

CVE-2005-3945

The SynAttackProtect protection in Microsoft Windows 2003 before SP1 and Windows 2000 before SP4...

7.8 High

The SynAttackProtect protection in Microsoft Windows 2003 before SP1 and Windows 2000 before SP4 with Update Roll-up uses a hash of predictable data, which allows remote attackers to cause a denial of service (CPU consumption) via a flood of SYN packets that produce identical hash values, which slows down the hash table lookups.

Exploit likelihood

12.3%Up 2.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.8

The SynAttackProtect protection in Microsoft Windows 2003 before SP1 and Windows 2000 before SP4 with Update Roll-up uses a hash of predictable data, which allows remote attackers to cause a denial of service (CPU consumption) via a flood of SYN packets that produce identical hash values, which slows down the hash table lookups.

Record
CVE-2005-3945
CVSS 2.0
7.8 HighAV:N/AC:L/Au:N/C:N/I:N/A:C
Updated
2026-11-02
CVE List No score

The SynAttackProtect protection in Microsoft Windows 2003 before SP1 and Windows 2000 before SP4 with Update Roll-up uses a hash of predictable data, which allows remote attackers to cause a denial of service (CPU consumption) via a flood of SYN packets that produce identical hash values, which slows down the hash table lookups.

Record
CVE-2005-3945
Updated
2026-11-02
EUVDEUVD-2005-3940 No score

The SynAttackProtect protection in Microsoft Windows 2003 before SP1 and Windows 2000 before SP4 with Update Roll-up uses a hash of predictable data, which allows remote attackers to cause a denial of service (CPU consumption) via a flood of SYN packets that produce identical hash values, which slows down the hash table lookups.

Record
EUVD-2005-3940
Updated
2026-11-03
GitHub AdvisoriesGHSA-vhpw-jc69-hpmx No score

The SynAttackProtect protection in Microsoft Windows 2003 before SP1 and Windows 2000 before SP4...

The SynAttackProtect protection in Microsoft Windows 2003 before SP1 and Windows 2000 before SP4 with Update Roll-up uses a hash of predictable data, which allows remote attackers to cause a denial of service (CPU consumption) via a flood of SYN packets that produce identical hash values, which slows down the hash table lookups.

Record
GHSA-vhpw-jc69-hpmx
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2005-3945 is a high vulnerability (CVSS 7.8) in Microsoft Windows 2000, published December 1, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 12.3%, the 96th percentile. No source names a fixed version.

References

MoveEnter Open