Vulnerabilities > CVE-2001-1244 - Denial of Service vulnerability in Multiple Vendor Small TCP MSS
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
NONE Availability impact
PARTIAL Summary
Multiple TCP implementations could allow remote attackers to cause a denial of service (bandwidth and CPU exhaustion) by setting the maximum segment size (MSS) to a very small number and requesting large amounts of data, which generates more packets with less TCP-level data that amplify network traffic and consume more server CPU to process.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| OS | 1 | |
| OS | 4 | |
| OS | 6 | |
| OS | 11 | |
| OS | 2 | |
| OS | 2 | |
| OS | 3 |
Exploit-Db
| description | HP-UX 11,Linux kernel 2.4,Windows 2000/NT 4.0,IRIX 6.5 Small TCP MSS DoS. CVE-2001-1244. Dos exploits for multiple platform |
| id | EDB-ID:20997 |
| last seen | 2016-02-02 |
| modified | 2001-07-07 |
| published | 2001-07-07 |
| reporter | Darren Reed |
| source | https://www.exploit-db.com/download/20997/ |
| title | HP-UX 11,Linux kernel 2.4,Windows 2000/NT 4.0,IRIX 6.5 Small TCP MSS DoS |