Oval Definition:oval:org.mitre.oval:def:4978
Revision Date:2013-09-02Version:23
Title:Server 2003 Object Management Vulnerability
Description:Windows Server 2003 and XP SP2, with Windows Firewall turned off, allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet with the SYN flag set and the same destination and source address and port, aka a reoccurrence of the "Land" vulnerability (CVE-1999-0016).
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2005-0688
Platform(s):Microsoft Windows Server 2003
Product(s):
Definition Synopsis
  • Software section
  • Windows Server 2003 is installed
  • AND 32-bit version of Windows or 64-bit (itanium architecture) version of Windows is installed
  • 32-Bit version of Windows is installed
  • OR a version of Windows for the ia64 architecture is installed
  • AND NOT Win2K/XP/2003 is patched
  • AND the version of Tcpip.sys is less than 5.2.3790.336
  • AND NOT the patch KB893066 is installed
  • AND Configuration section
  • The SynAttackProtect parameter is set to 2
    • BACK