CVE-2005-0356: Alaxala Networks

Medium severity, CVSS 5.0. EPSS: 82.8% chance of exploitation in the next 30 days.

Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard later packets because they appear to be too old.

Affected products

Alaxala Alaxala Networks
Cisco Agent Desktop: any version
Cisco Aironet AP1200: any version
Cisco Aironet AP350: any version
Cisco Call Manager: version 1.0 only; version 2.0 only; version 3.0 only; version 3.1 only; version 3.1(2) only; version 3.1(3a) only; …
Cisco Ciscoworks 1105 Hosting Solution Engine: any version
Cisco Ciscoworks 1105 Wireless Lan Solution Engine: any version
Cisco Ciscoworks Access Control List Manager: version 1.5 only; version 1.6 only
Cisco Ciscoworks CD1: version 1st only; version 2nd only; version 3rd only; version 4th only; version 5th only
Cisco Ciscoworks Common Management Foundation: version 2.0 only; version 2.1 only; version 2.2 only
Cisco Ciscoworks Common Services: version 2.2 only
Cisco Ciscoworks Lms: version 1.3 only
Cisco Ciscoworks VPN Security Management Solution: any version
Cisco Ciscoworks Windows: any version
Cisco Ciscoworks Windows Wug: any version
Cisco Conference Connection: version 1.1(1) only; version 1.2 only
Cisco Content Services Switch 11000: any version
Cisco Content Services Switch 11050: any version
Cisco Content Services Switch 11150: any version
Cisco Content Services Switch 11500: any version
Cisco Content Services Switch 11501: any version
Cisco Content Services Switch 11503: any version
Cisco Content Services Switch 11506: any version
Cisco Content Services Switch 11800: any version
Cisco E-Mail Manager: any version
and 51 more

Published 2005-05-31. Last modified 2026-06-16.