CVE-2004-0230: Juniper Junos

Medium severity, CVSS 5.0. EPSS: 80.3% chance of exploitation in the next 30 days.

TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP.

Affected products

• Juniper Junos: before 11.4 (fixed in 11.4); version 11.4 only; version 11.4r13 only; version 11.4x27 only; version 12.1 only; version 12.1r only; …
• McAfee Network Data Loss Prevention: up to and including 8.6; version 9.2.0 only; version 9.2.1 only; version 9.2.2 only
• Microsoft Windows 2000: affected versions not specified
• Microsoft Windows 98: affected versions not specified
• Microsoft Windows 98se: affected versions not specified
• Microsoft Windows Server 2003: affected versions not specified
• Microsoft Windows XP: affected versions not specified
• Netbsd Netbsd: version 1.5 only; version 1.5.1 only; version 1.5.2 only; version 1.5.3 only; version 1.6 only; version 1.6.1 only; …
• Openpgp Openpgp: version 2.6.2 only
• Oracle Solaris: version 10 only; version 11 only
• Xinuos Openserver: version 5.0.6 only; version 5.0.7 only
• Xinuos Unixware: version 7.1.1 only; version 7.1.3 only

Published 2004-08-18. Last modified 2026-10-09.