CVE-2004-0171

FreeBSD 5.1 and earlier, and Mac OS X before 10.3.4, allows remote attackers to cause a denial of service (resource exhaustion of memory buffers and system crash) via a large number of out-of-sequence TCP packets, which prevents the operating system from creating new connections.

• ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:04.tcp.asc
• http://lists.seifried.org/pipermail/security/2004-May/003743.html
• http://www.idefense.com/application/poi/display?id=78&type=vulnerabilitiesPatch, Vendor Advisory
• http://www.kb.cert.org/vuls/id/395670US Government Resource
• http://www.osvdb.org/4124
• http://www.securityfocus.com/bid/9792Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15369
• ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:04.tcp.asc
• http://lists.seifried.org/pipermail/security/2004-May/003743.html
• http://www.idefense.com/application/poi/display?id=78&type=vulnerabilitiesPatch, Vendor Advisory
• http://www.kb.cert.org/vuls/id/395670US Government Resource
• http://www.osvdb.org/4124
• http://www.securityfocus.com/bid/9792Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15369

Published

Mar 15, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-0164KAME IKE daemon (racoon) does not properly handle hash value…
• CVE-2004-0165Format string vulnerability in Point-to-Point Protocol (PPP)…
• CVE-2004-0166Unknown vulnerability in Safari web browser for Mac OS X 10.…
• CVE-2004-0167DiskArbitration in Mac OS X 10.2.8 and 10.3.2 does not prope…
• CVE-2004-0168Unknown vulnerability in CoreFoundation for Mac OS X 10.3.2,…
• CVE-2004-0169QuickTime Streaming Server in MacOS X 10.2.8 and 10.3.2 allo…
• CVE-2004-0172Heap-based buffer overflow in the search_for_command functio…
• CVE-2004-0173Directory traversal vulnerability in Apache 1.3.29 and earli…
• CVE-2004-0174Apache 1.4.x before 1.3.30, and 2.0.x before 2.0.49, when us…7.5
• CVE-2004-0175Directory traversal vulnerability in scp for OpenSSH before …
• CVE-2004-0176Multiple buffer overflows in Ethereal 0.8.13 to 0.10.2 allow…
• CVE-2004-0177The ext3 code in Linux 2.4.x before 2.4.26 does not properly…