Rule:--Sid:2523--Summary:This event is generated when an attempt is made to exploit a knownvulnerability in the Transmission Control Protocol (TCP) used in BorderGateway Protocol (BGP).--Impact:Denial of Service (DoS).--Detailed Information:The Border Gateway Protocol uses TCP to maintain sessions when handlingDNS queries. A vulnerability in the core implementation of TCP may makeit possible for an attacker to reset a number of connections and cause aDenial of Service (DoS) to occur.The attack is possible because the listening service will accept a TCPsequence number within a range of what is expected in an establishedsession. Since BGP relies on an established TCP session state, guessinga suitable sequence number to reset connections is feasible.--Affected Systems:	Various implementations of TCP by multiple vendors--Attack Scenarios:An attcker needs to send a specially crafted packet to reset aconnection.--Ease of Attack:Simple. Exploits are available.--False Positives:None known.--False Negatives:None known.--Corrective Action:Apply the appropriate vendor supplied patches--Contributors:Sourcefire Research TeamJudy Novak <judy.novak@sourcefire.com>Nigel Houghton <nigel.houghton@sourcefire.com>--Additional References:--