CVE-2000-0178

ServerIron switches by Foundry Networks have predictable TCP/IP sequence numbers, which allows remote attackers to spoof or hijack sessions...

CVE-2000-0178

CVE-2000-0178 affects Foundry Networks ServerIron switches, where predictable TCP/IP sequence numbers can enable remote attackers to spoof or hijack sessions. The available documents confirm the vulnerability and resulting impact (session spoofing/hijacking) but do not provide concrete remediatio...

CVE-2000-0178

ServerIron switches by Foundry Networks have predictable TCP/IP sequence numbers, which allows remote attackers to spoof or hijack sessions...

CVE-1999-0599

Technical details (affected product/versions/root cause/fix) are not publicly available in the provided documents. Monitor for updates.

Microsoft Windows Media Services 4.0/4.1 - Handshake Sequence Denial of Service

// source: https://www.securityfocus.com/bid/1000/info // Misordered handshake sequences sent to a Windows Media Unicast Server via Windows Media Player will cause the server to crash. Restarting the Unicast Service, including any open sessions during the time of the crash, is required in order t...

Microsoft Windows Media Services 4.04.1 - Handshake Sequence Denial of Service

Microsoft Windows Media Services 4.04.1 - Handshake Sequence Denial of Service // source: https://www.securityfocus.com/bid/1000/info // Misordered handshake sequences sent to a Windows Media Unicast Server via Windows Media Player will cause the server to crash. Restarting the Unicast Service,...

CVE-1999-0077

CVE-1999-0077 refers to a TCP Initial Sequence Number (ISN) weakness enabling spoofing. The connected documents corroborate ISN predictability as a risk that could allow spoofed TCP connections or session hijacking, with exploitation discussed in multiple scanners/advisories. F5’s advisory explic...

CVE-1999-0077

Predictable TCP sequence numbers allow spoofing...

Linux Kernel 2.2 - Predictable TCP Initial Sequence Number

source: https://www.securityfocus.com/bid/670/info A vulnerability in the Linux kernel allows remote users to guess the initial sequence number of TCP sessions. This can be used to create spoofed TCP sessions bypassing some types of IP based access controls. The function 'securetcpsequencenumber'...

Linux Kernel 2.2 - Predictable TCP Initial Sequence Number

Linux Kernel 2.2 - Predictable TCP Initial Sequence Number source: https://www.securityfocus.com/bid/670/info A vulnerability in the Linux kernel allows remote users to guess the initial sequence number of TCP sessions. This can be used to create spoofed TCP sessions bypassing some types of IP...

rlogin Service Detection

The rlogin service is running on the remote host. This service is vulnerable since data is passed between the rlogin client and server in cleartext. A man-in-the-middle attacker can exploit this to sniff logins and passwords. Also, it may allow poorly authenticated logins without passwords. If th...

CVE-2000-0328

Windows NT 4.0 generates predictable random TCP initial sequence numbers ISN, which allows remote attackers to perform spoofing and session hijacking...

rsh Service Detection

The rsh service is running on the remote host. This service is vulnerable since data is passed between the rsh client and server in cleartext. A man-in-the-middle attacker can exploit this to sniff logins and passwords. Also, it may allow poorly authenticated logins without passwords. If the host...

Linux Kernel 2.0.302.0.352.0.362.0.37 - Blind TCP Spoofing

Linux Kernel 2.0.302.0.352.0.362.0.37 - Blind TCP Spoofing / source: https://www.securityfocus.com/bid/580/info Certain Linux kernels in the 2.0.3x range are susceptible to blind TCP spoofing attacks due to the way that the kernel handles invalid ack sequence numbers, and the way it assigns IDs t...

Linux Kernel 2.0.30/2.0.35/2.0.36/2.0.37 - Blind TCP Spoofing

/ source: https://www.securityfocus.com/bid/580/info Certain Linux kernels in the 2.0.3x range are susceptible to blind TCP spoofing attacks due to the way that the kernel handles invalid ack sequence numbers, and the way it assigns IDs to outgoing IP datagrams. For this vulnerability to be...

CVE-1999-0599

A network intrusion detection system IDS does not properly handle packets with improper sequence numbers...

PT-1999-1217 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A network intrusion detection system IDS fails to properly handle packets that contain improper sequence numbers. Recommendations: At the moment, there is no information about a new...

CVE-1999-1291

TCP/IP implementation in Microsoft Windows 95, Windows NT 4.0, and possibly others, allows remote attackers to reset connections by forcing a reset RST via a PSH ACK or other means, obtaining the target's last sequence number from the resulting packet, then spoofing a reset to the target...

CVE-1999-1442

Bug in AMD K6 processor on Linux 2.0.x and 2.1.x kernels allows local users to cause a denial of service crash via a particular sequence of instructions, possibly related to accessing addresses outside of segments...

CVE-1999-0077

Predictable TCP sequence numbers allow spoofing...