CVE-2004-0744: Medium severity Apple Mac OS X Server vulnerability

Published Aug 12, 2004

Updated

The TCP/IP Networking component in Mac OS X before 10.3.5 allows remote attackers to cause a denial of service (memory and resource consumption) via a "Rose Attack" that involves sending a subset of small IP fragments that do not form a complete, larger packet.

Affected Software

28 affected components

Apple Mac OS X Server=10.3.2

Apple iOS and macOS=10.2.5

Apple Mac OS X Server=10.2.2

Apple iOS and macOS=10.2.7

Apple iOS and macOS=10.2.8

Apple Mac OS X Server=10.2.4

Apple iOS and macOS=10.2.1

Apple iOS and macOS=10.3.1

Apple Mac OS X Server=10.3.3

Apple Mac OS X Server=10.2.7

Apple Mac OS X Server=10.2.3

Apple iOS and macOS=10.2.4

Apple Mac OS X Server=10.3.4

Apple iOS and macOS=10.3.2

Apple iOS and macOS=10.2.2

Apple Mac OS X Server=10.2.5

Apple Mac OS X Server=10.3

Apple Mac OS X Server=10.2.6

Apple Mac OS X Server=10.2

Apple Mac OS X Server=10.2.1

Apple Mac OS X Server=10.3.1

Apple iOS and macOS=10.3.4

Apple iOS and macOS=10.3.3

Apple iOS and macOS=10.2.6

Apple iOS and macOS=10.2.3

Apple Mac OS X Server=10.2.8

Apple iOS and macOS=10.2

Apple iOS and macOS=10.3

Event History

Aug 12, 2004

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2004-0744?

CVE-2004-0744 is rated as a high severity vulnerability due to its potential to cause denial of service.

How do I fix CVE-2004-0744?

To mitigate CVE-2004-0744, upgrade to Mac OS X version 10.3.5 or later, which addresses this vulnerability.

What does CVE-2004-0744 exploit?

CVE-2004-0744 exploits the TCP/IP Networking component by using a technique known as a 'Rose Attack' to consume system resources.

Which versions of macOS are affected by CVE-2004-0744?

CVE-2004-0744 affects multiple versions of Mac OS X including 10.2.1 to 10.3.4.

Can CVE-2004-0744 impact network availability?

Yes, CVE-2004-0744 can significantly impact network availability by causing a denial of service.