medium5.0Public exploit code
CVE-1999-0414
In Linux before version 2.0.36, remote attackers can spoof a TCP connection and pass data to the application layer before fully establishing the connection.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Linux Kernel 2.0.30/2.0.35/2.0.36/2.0.37 - Blind TCP Spoofing1999-07-31 · remote · linux · Verified
Impact
In Linux before version 2.0.36, remote attackers can spoof a TCP connection and pass data to the application layer before fully establishing the connection.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Linux | Linux Kernel | Versions 2.0.30, 2.0.35, 2.0.36, 2.0.37 |