PT-2000-1828 · Freebsd · Freebsd

Publicado 2000-12-19 · Atualizado 2008-09-05 · CVE-2000-0916

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions FreeBSD versions 4.1.1 and earlier

Description The issue is related to an insufficient random number generator used to generate initial TCP sequence numbers, allowing remote attackers to spoof TCP connections.

Recommendations For FreeBSD versions 4.1.1 and earlier, update to a version that uses a sufficient random number generator to generate initial TCP sequence numbers.

Exploit

Correção

Identificadores relacionados

CVE-2000-0916

Produtos afetados

Freebsd

Referências · 4

• 🔥 https://exploit-db.com/exploits/19522 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-0916 · Nota de Segurança
• ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:52.tcp-iss.asc · Aviso do Fabricante
• http://securityfocus.com/bid/1766 · Aviso do Fabricante