CVE-2003-1230

Impact

The implementation of SYN cookies (syncookies) in FreeBSD 4.5 through 5.0-RELEASE-p3 uses only 32-bit internal keys when generating syncookies, which makes it easier for remote attackers to conduct brute force ISN guessing attacks and spoof legitimate traffic.

Affected products

Versions were read from the advisory text. No structured product data has been published for this record yet.

References

• NVD record
• CVE.org record
• http://secunia.com/advisories/8142/
• http://www.osvdb.org/19785
• http://www.securityfocus.com/advisories/5013
• http://www.securityfocus.com/bid/6920
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11397
• http://secunia.com/advisories/8142/
• http://www.osvdb.org/19785
• http://www.securityfocus.com/advisories/5013
• http://www.securityfocus.com/bid/6920
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11397