CVE-2005-0356

CVE-2005-0356 describes a denial-of-service vulnerability affecting multiple TCP implementations, including products from Cisco, Microsoft, and F5, when the Protection Against Wrapped Sequence Numbers (PAWS) and timestamps options are enabled. An unauthenticated remote attacker can exploit this by sending a spoofed packet with a large timer value, causing the affected host to discard subsequent legitimate packets due to appearing too old. The vulnerability has a CVSS score of 5.0 (medium severity) with a low attack complexity and a partial availability impact. While not listed on CISA's KEV catalog, exploit code is publicly available via ExploitDB, though there is no evidence of active exploitation or significant community discussion.