CVE-2004-0230 Denial of service in n/a
Remote attackers can disrupt persistent TCP connections by injecting RST packets, exploiting large window sizes to guess sequence numbers.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2004-0230?
CVE-2004-0230 is a medium-severity denial of service vulnerability in Juniper Junos, published on 5 May 2004. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP.
Which versions are affected by CVE-2004-0230?
It affects 12 products.
Products include Juniper Junos, Mcafee Network Data Loss Prevention, Microsoft Windows 2000, Microsoft Windows 98, Microsoft Windows 98se, Microsoft Windows Server 2003 and 6 more.
How do I fix CVE-2004-0230?
Apply the vendor's patch.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2004-0230 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2004-0230 exists.
Public exploit code: 7 Exploit-DB entries.
Other vulnerabilities in Juniper Junos
- CVE-2023-36845 Juniper Junos OS EX Series and SRX Series PHP External Variable Modification
- CVE-2020-1631 Juniper Junos OS Path Traversal
- CVE-2025-21590 Juniper Junos OS Improper Isolation or Compartmentalization
- CVE-2023-36851 Juniper Junos OS SRX Series Missing Authentication for Critical Function
- CVE-2023-36844 Juniper Junos OS EX Series PHP External Variable Modification
Sources
Also known as DEBIAN-CVE-2004-0230, GHSA-58p6-7f25-xqv3, ROOT-OS-DEBIAN-12-CVE-2004-0230, ROOT-OS-DEBIAN-13-CVE-2004-0230.