PT-2000-1828 · Freebsd · Freebsd

Published 2000-12-19 · Updated 2008-09-05 · CVE-2000-0916

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions FreeBSD versions 4.1.1 and earlier

Description The issue is related to an insufficient random number generator used to generate initial TCP sequence numbers, allowing remote attackers to spoof TCP connections.

Recommendations For FreeBSD versions 4.1.1 and earlier, update to a version that uses a sufficient random number generator to generate initial TCP sequence numbers.

Exploit

Fix

Related Identifiers

CVE-2000-0916

Affected Products

Freebsd

References · 4

• 🔥 https://exploit-db.com/exploits/19522 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-0916 · Security Note
• ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:52.tcp-iss.asc · Vendor Advisory
• http://securityfocus.com/bid/1766 · Vendor Advisory