PT-2002-1441 · Bsd · Bsd

Published 2002-06-25 · Updated 2008-09-05 · CVE-2002-0381

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Various BSD operating systems (affected versions not specified)

Description The issue concerns the TCP implementation in various BSD operating systems, specifically in the tcp input.c file. It does not properly block connections to broadcast addresses. This could allow remote attackers to bypass intended filters by sending packets with a unicast link layer address and an IP broadcast address.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2002-0381

Affected Products

Bsd

References · 9

• 🔥 http://online.securityfocus.com/archive/1/262733 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-0381 · Security Note
• http://freebsd.org/cgi/query-pr.cgi?pr=35022 · Vendor Advisory
• ftp://patches.sgi.com/support/free/security/advisories/20030604-01-I · Vendor Advisory
• http://osvdb.org/5308 · Note
• http://cvsweb.netbsd.org/bsdweb.cgi/syssrc/sys/netinet/tcp_input.c.diff?r1=1.136&r2=1.137 · Note
• http://openbsd.org/cgi-bin/cvsweb/src/sys/netinet/tcp_input.c.diff?r1=1.109&r2=1.110 · Note
• http://securityfocus.com/bid/4309 · Note
• http://iss.net/security_center/static/8485.php · Note