The TCP implementation in Sun Solaris 8 9 and 10 before 20060726 allows remote attackers to cause a denial of service (resource exhaustion) via a TCP packet with an incorrect sequence number which triggers an ACK storm.