CVE-2005-1184: microsoft windows_2003_server
Vulnerability summary
CVE-2005-1184 is a medium (CVSS 5.0) vulnerability in microsoft windows_2003_server. EPSS estimates a 32.75% chance of exploitation in the next 30 days, higher than 98.3% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 19-04-2005PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
The TCP/IP stack in multiple operating systems allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet with the correct sequence number but the wrong Acknowledgement number, which generates a large number of "keep alive" packets. NOTE: some followups indicate that this issue could not be replicated.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
32.75%
Chance of exploitation in the next 30 days
Percentile
98%
Versus all other CVEs
30-day change
0.00 pp
From 32.75% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundMultiple Vendor - TCP Session Acknowledgement Number Denial of Service
Maturity: poc
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Microsoft2 products
- windows_2003_serverdatacenter_64-bit:sp1 | enterprise | enterprise:sp1 | enterprise_64-bit | enterprise_64-bit:sp1 | r2 | r2:sp1 | standard | standard:sp1 | standard_64-bit | web | web:sp1
- windows_nt4.0:sp3 | 4.0:sp4 | 4.0:sp5 | 4.0:sp6 | 4.0:sp6a | 4.0 | 4.0:sp1 | 4.0:sp2
1 vendor · 2 products