The TCP/IP Networking component in Mac OS X before 10.3.5 allows remote attackers to cause a denial of service (memory and resource consumption) via a "Rose Attack" that involves sending a subset of small IP fragments that do not form a complete, larger packet.
https://exchange.xforce.ibmcloud.com/vulnerabilities/16946
http://www.auscert.org.au/render.html?it=4291
http://marc.info/?l=bugtraq&m=108308604119618&w=2