What’s Vulnerable › Vulnerabilities

CVE-2005-0356

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 82.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2005-05-31 · updated 2026-06-16

Description

Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard later packets because they appear to be too old.

Affected products

• Alaxala Networks: ax5400s, ax7800r, ax7800s
• Cisco Agent Desktop: all versions
• Cisco Aironet Ap1200: all versions
• Cisco Aironet Ap350: all versions
• Cisco Call Manager: 1.0, 2.0, 3.0, 3.1, 3.1(2), 3.1(3a) (+4)
• Ciscoworks 1105 Hosting Solution Engine: all versions
• Ciscoworks 1105 Wireless Lan Solution Engine: all versions
• Ciscoworks Access Control List Manager: 1.5, 1.6
• Ciscoworks Cd1: 1st, 2nd, 3rd, 4th, 5th
• Ciscoworks Common Management Foundation: 2.0, 2.1, 2.2
• Ciscoworks Common Services: 2.2
• Ciscoworks Lms: 1.3
• Ciscoworks Vpn Security Management Solution: all versions
• Ciscoworks Windows: all versions
• Ciscoworks Windows Wug: all versions
• Cisco Conference Connection: 1.1(1), 1.2
• Cisco Content Services Switch 11000: all versions
• Cisco Content Services Switch 11050: all versions
• Cisco Content Services Switch 11150: all versions
• Cisco Content Services Switch 11500: all versions
• Cisco Content Services Switch 11501: all versions
• Cisco Content Services Switch 11503: all versions
• Cisco Content Services Switch 11506: all versions
• Cisco Content Services Switch 11800: all versions
• Cisco E-Mail Manager: all versions
• Cisco Emergency Responder: 1.1
• Cisco Intelligent Contact Manager: 5.0
• Cisco Interactive Voice Response: all versions
• Cisco Ip Contact Center Enterprise: all versions
• Cisco Ip Contact Center Express: all versions

References

• http://secunia.com/advisories/15393
• http://secunia.com/advisories/15417/
• http://secunia.com/advisories/18222
• http://secunia.com/advisories/18662
• http://support.avaya.com/elmodocs2/security/ASA-2006-032.htm
• http://www.cisco.com/warp/public/707/cisco-sn-20050518-tcpts.shtml
• http://www.kb.cert.org/vuls/id/637934
• http://www.securityfocus.com/bid/13676
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20635

Get alerted when CVE-2005-0356 or the next vulnerability affects your stack