CVE-2004-0790

mediumEPSS 0.801 · 100 %ileexploit · functionalEUUS

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

3 exploits · functional

Likely / severe?

80.1% (100th) EPSS

CVSS 5 · medium

Is it mine?

11 products

Check your exposure

Who says so?

2 sources

enisa_euvd · nvd

EPSS · scored 2026-10-17

Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (reset TCP connections) via spoofed ICMP error messages, aka the "blind connection-reset attack." NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.

cvss

Technical severity, 0–10. One row per scoring source.

5.0

010

base score 0–10 · higher = more severe · hover a vector to decode

v2.05mediumAV:N/AC:L/Au:N/C:N/I:N/A:Pprimary · NVD / NIST USexploitability 10 · impact 2.9

weaknesses

The CWE weakness classes this flaw belongs to.

No weakness (CWE) mapping recorded.

exploits (3)

Public proof-of-concept and weaponised exploit code.

EDB-25389Multiple Vendor ICMP Message Handling - Denial of Servicefunctional · exploit_db
EDB-942Microsoft Windows - Malformed IP Options Denial of Service (MS05-019)functional · exploit_db
EDB-948Multiple OS (Win32/Aix/Cisco) - Crafted ICMP Messages Denial of Service (MS05-019)functional · exploit_db

affected products (11)

Products and version ranges known to be affected.

n/a n/a≤ n/aenisa_euvdEU
microsoft windows 2000all versionsnvdUScpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*
microsoft windows 2003 server= r2nvdUScpe:2.3:o:microsoft:windows_2003_server:*:*:*:*:*:*:*:*
microsoft windows 98all versionsnvdUScpe:2.3:o:microsoft:windows_98:*:*:*:*:*:*:*:*
microsoft windows 98seall versionsnvdUScpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*
microsoft windows meall versionsnvdUScpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*
microsoft windows xpall versionsnvdUScpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*
sun solaris= 10.0nvdUScpe:2.3:o:sun:solaris:*:*:*:*:*:*:*:*
sun solaris= 9.0nvdUScpe:2.3:o:sun:solaris:*:*:*:*:*:*:*:*
sun sunos= 5.7nvdUScpe:2.3:o:sun:sunos:*:*:*:*:*:*:*:*
sun sunos= 5.8nvdUScpe:2.3:o:sun:sunos:*:*:*:*:*:*:*:*

also known as (2)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

enisa_euvd nvd NVD CVE.org

published 2005-04-12modified 2026-06-16

references (52)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan