CVE-2005-1649: Microsoft Windows 2003 Server

Medium severity, CVSS 5.0. EPSS: 21.8% chance of exploitation in the next 30 days.

The IPv6 support in Windows XP SP2, 2003 Server SP1, and Longhorn, with Windows Firewall turned off, allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet with the SYN flag set and the same destination and source address and port, a variant of CVE-2005-0688 and a reoccurrence of the "Land" vulnerability (CVE-1999-0016).

Affected products

• Microsoft Windows 2003 Server: version datacenter_64-bit only; version enterprise only; version enterprise_64-bit only; version r2 only; version standard only; version web only
• Microsoft Windows XP: any version

Published 2005-05-18. Last modified 2026-06-16.