CVE-2004-0790: Microsoft Windows 2000

Medium severity, CVSS 5.0. EPSS: 80.1% chance of exploitation in the next 30 days.

Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (reset TCP connections) via spoofed ICMP error messages, aka the "blind connection-reset attack." NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.

Affected products

• Microsoft Windows 2000: any version
• Microsoft Windows 2003 Server: version r2 only
• Microsoft Windows 98: any version
• Microsoft Windows 98se: any version
• Microsoft Windows Me: any version
• Microsoft Windows XP: any version
• Sun Solaris: version 9.0 only; version 10.0 only
• Sun Sunos: version 5.7 only; version 5.8 only

Published 2005-04-12. Last modified 2026-06-16.