CVE:CVE-2001-1244
CNNVD:CNNVD-200107-059
CVE(CAN) ID: CAN-2001-1244
在一些操作系统的TCP栈实现中存在一些潜在的拒绝服务问题。
TCP选项中有一个MSS(最大分片大小)。TCP客户端用它来告诉对方自己每个分片的最大TCP
数据长度。
如果将MSS设成一个很小的数值(例如 1)，然后通过一个TCP服务提交大量的请求，可能引起
对方服务器产生大量的回复请求(多倍于攻击者的发送数量)，这可能导致对方服务器或
网络的负荷大大增加，造成拒绝服务攻击。
solution:Upgrade freebsd freebsd to a higher version than 4.3,and avoid the version 4.3; Upgrade hp hp-ux to a higher version than 11.00,11.0.4,11.11,and avoid the version 11.00,11.0.4,11.11; Upgrade hp vvos to a higher version than 11.04,and avoid the version 11.04; Upgrade linux linux_kernel to a higher version than 2.4.0,2.4.1,2.4.2,2.4.3,2.4.4,2.4.5,and avoid the version 2.4.0,2.4.1,2.4.2,2.4.3,2.4.4,2.4.5; Upgrade microsoft windows_2000 to a higher version than *,*:sp1,*:sp2,and avoid the version *:sp1,*:sp2; Upgrade microsoft windows_nt to a higher version than 4.0,4.0:sp1,4.0:sp2,4.0:sp3,4.0:sp4,4.0:sp5,4.0:sp6,4.0:sp6a,and avoid the version 4.0,4.0:sp1,4.0:sp2,4.0:sp3,4.0:sp4,4.0:sp5,4.0:sp6,4.0:sp6a; Upgrade netbsd netbsd to a higher version than 1.5,1.5.1,and avoid the version 1.5,1.5.1; Upgrade openbsd openbsd to a higher version than 2.8,2.9,and avoid the version 2.8,2.9; Upgrade sun sunos to a higher version than 5.5.1,5.7,5.8,and avoid the version 5.5.1,5.7,5.8