CVE-2004-0230

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 80.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-05-05 · updated 2026-10-09

Description

TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP.

Affected products

Juniper Junos OS: before 11.4; 11.4, 11.4-r1, 11.4-r10, 11.4-r2, 11.4-r3, 11.4-r4 (+48) — fixed in 11.4
McAfee Network Data Loss Prevention (NDLP): through 8.6; 9.2.0, 9.2.1, 9.2.2
Microsoft Windows 2000: all versions
Microsoft Windows 98: all versions
Microsoft Windows 98Se: all versions
Microsoft Windows Server 2003: all versions
Microsoft Windows XP Service Pack 3: all versions
Netbsd: 1.5, 1.5.1, 1.5.2, 1.5.3, 1.6, 1.6.1 (+2)
Openpgp: 2.6.2
Oracle Corporation Solaris Operating System: 10, 11
Xinuos Openserver: 5.0.6, 5.0.7
Xinuos Unixware: 7.1.1, 7.1.3

How to fix

Upgrade to a fixed version: Juniper Junos OS 11.4. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2004-0230 or the next vulnerability affects your stack