The ip_push_pending_frames function in Linux 2.4.x and 2.6.x before 2.6.16 increments the IP ID field when sending a RST after receiving unsolicited TCP SYN-ACK packets, which allows remote attackers to conduct an Idle Scan (nmap -sI) attack, which bypasses intended protections against such attacks.
Metrics
Affected Vendors & Products
Advisories
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-1097-1 | New Kernel 2.4.27 packages fix several vulnerabilities |
Debian DSA |
DSA-1103-1 | New Linux kernel 2.6.8 packages fix several vulnerabilities |
EUVD |
EUVD-2006-1246 | The ip_push_pending_frames function in Linux 2.4.x and 2.6.x before 2.6.16 increments the IP ID field when sending a RST after receiving unsolicited TCP SYN-ACK packets, which allows remote attackers to conduct an Idle Scan (nmap -sI) attack, which bypasses intended protections against such attacks. |
Ubuntu USN |
USN-281-1 | Linux kernel vulnerabilities |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
No history.
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-07T17:03:28.742Z
Reserved: 2006-03-15T00:00:00
Link: CVE-2006-1242
No data.
Status : Deferred
Published: 2006-03-15T17:06:00.000
Modified: 2025-04-03T01:03:51.193
Link: CVE-2006-1242
OpenCVE Enrichment
No data.
Weaknesses
Debian DSA
EUVD
Ubuntu USN