Secunia

A vulnerability has been reported in some Cisco products, which can be exploited by malicious people to cause a DoS (Denial of Service) on active TCP sessions.

The vulnerability is caused due to an error in the implementation of the TCP Timestamp option and can be exploited via specially crafted packets to cause a targeted TCP session to stall until it's reset.

Successful exploitation requires knowledge of IP address information of the source and destination of the TCP network connection.

The vulnerability affects the following products:
* SN5400 series storage routers
* CSS11000 series content services switches
* AP350 and AP1200 series Access Points running VxWorks
* MGX8200, MGX8800, and MGX8900 series WAN switches (only management interfaces)

Solution
SN5400 series storage routers:
Further details available in Customer Area

Provided and/or discovered by
US-CERT credits Noritoshi Demizu.

Original Advisory
Cisco:
http://www.cisco.com/warp/public/707/cisco-sn-20050518-tcpts.shtml

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area