CVE-2004-1060: Multiple TCP/IP and ICMP implementations, when using Path MTU (PMTU) discovery (PMTUD), allow remote attack...

Security readout for executives and security teams

CVE-2004-1060 is an old denial-of-service issue in how some TCP/IP stacks process Path MTU Discovery ICMP messages. A forged “fragmentation needed” message can make TCP connections use an artificially small packet size, reducing throughput. The bundle does not provide a complete affected-product list or CVSS score. Exposure is most plausible in legacy systems, network devices, and operating systems using PMTUD and matching vendor advisories. The bundle cites Cisco, Microsoft, HP, SCO, OVAL, and research references, but lists affected products as n/a, so asset-specific exposure requires vendor mapping. Address during legacy infrastructure review or network hardening work, not as an emergency without additional evidence. Escalate if critical services rely on affected legacy stacks or if monitoring shows suspicious ICMP-driven throughput degradation. Mitigation focus: Map assets to the cited vendor advisories before assigning remediation ownership.; Apply applicable vendor updates or configuration guidance for affected platforms.; Review ICMP filtering and PMTUD handling against vendor recommendations..

Prepared

Jun 29, 2026, 22:44 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.