CVE-2006-1242

security flaw

Published Mar 15, 2006 CVSS 2.0 · 5.0 Medium EPSS 3.5% KEV · Not listed
Description
The ip_push_pending_frames function in Linux 2.4.x and 2.6.x before 2.6.16 increments the IP ID field when sending a RST after receiving unsolicited TCP SYN-ACK packets, which allows remote attackers to conduct an Idle Scan (nmap -sI) attack, which bypasses intended protections against such attacks.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-1097-1 New Kernel 2.4.27 packages fix several vulnerabilities
Debian DSA Debian DSA DSA-1103-1 New Linux kernel 2.6.8 packages fix several vulnerabilities
EUVD EUVD EUVD-2006-1246 The ip_push_pending_frames function in Linux 2.4.x and 2.6.x before 2.6.16 increments the IP ID field when sending a RST after receiving unsolicited TCP SYN-ACK packets, which allows remote attackers to conduct an Idle Scan (nmap -sI) attack, which bypasses intended protections against such attacks.
Ubuntu USN Ubuntu USN USN-281-1 Linux kernel vulnerabilities
References
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 5:03 PM
Reserved
Mar 15, 2006, 12:00 AM
Status
Modified
Published
Mar 15, 2006, 5:06 PM
Modified
Jun 16, 2026, 10:22 PM
Severity
Low
Public date
Mar 14, 2006, 12:00 AM