CVE-2005-0067

CVE-2005-0067 describes a design flaw in TCP where the lack of port randomization allows attackers to forge ICMP error messages, specifically targeting TCP connections. This vulnerability affects TCP implementations and can lead to denial of service through blind connection-reset attacks (using "Destination Unreachable"), or blind throughput-reduction attacks (using "Source Quench" or messages that reduce Path MTU). With a CVSS score of 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P), it is a medium-severity vulnerability that can be exploited remotely with low complexity, resulting in partial denial of service. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion, and it is not listed in the KEV catalog.