CVE-2004-0744 - CVE House

Back to Database

Status published Medium CVE-2004-0744

The TCP/IP Networking component in Mac OS X before 10.3.5...

5 CVSS

Vulnerability Description

The TCP/IP Networking component in Mac OS X before 10.3.5 allows remote attackers to cause a denial of service (memory and resource consumption) via a "Rose Attack" that involves sending a subset of small IP fragments that do not form a complete, larger packet.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2004-0744

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from apple

View All →

Project Wonder WebObjects 1.0 through 5.4.3 is vulnerable to Arbitrary...

An issue was discovered in the GAEN (aka Google/Apple Exposure...

iMessage (Messages app) iOS 12.4 and prior user interface does...

Some HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service

Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service

Affected Vendor

apple

View all reports →

Affected Software

mac os x, mac os x server

Vulnerable Versions:

10.2, 10.2.1, 10.2.2, 10.2.3, 10.2.4, 10.2.5, 10.2.6, 10.2.7, 10.2.8, 10.3, 10.3.1, 10.3.2, 10.3.3, 10.3.4

Timeline

Official Publish: August 12th, 2004

Last Modified: August 8th, 2024

Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.