CVE-2001-0328

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Linux Kernel 2.2 - Predictable TCP Initial Sequence Number1999-09-27 · remote · linux · Verified

Impact

TCP implementations that use random increments for initial sequence numbers (ISN) can allow remote attackers to perform session hijacking or disruption by injecting a flood of packets with a range of ISN values, one of which may match the expected ISN.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

References

• NVD record
• CVE.org record
• http://secunia.com/advisories/8044
• http://securityreason.com/securityalert/57
• http://www.cert.org/advisories/CA-2001-09.html
• http://www.securityfocus.com/bid/2682
• http://www.securitytracker.com/id/1033181
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4922
• https://support.f5.com/csp/article/K19063943?utm_source=f5support&amp%3Butm_medium=RSS
• http://secunia.com/advisories/8044
• http://securityreason.com/securityalert/57
• http://www.cert.org/advisories/CA-2001-09.html
• http://www.securityfocus.com/bid/2682
• http://www.securitytracker.com/id/1033181
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4922
• https://support.f5.com/csp/article/K19063943?utm_source=f5support&amp%3Butm_medium=RSS