366 matches found
SonicWALL SOHO Firewall Predictable TCP Initial Sequence Number Vulnerability
SonicWALL SOHO uses easily predictable TCP sequence numbers, which allows remote attackers to spoof or hijack sessions. CVE: CVE-2001-1104 Last updated: Sept. 5, 2008, 8:25 p.m...
CVE-2001-0328: Undefined Security Weakness
TCP implementations that use random increments for initial sequence numbers ISN can allow remote attackers to perform session hijacking or disruption by injecting a flood of packets with a range of ISN values, one of which may match the expected ISN...
CVE-2001-0288
CVE-2001-0288 pertains to Cisco IOS devices (notably switches/routers running IOS 12.1 and earlier) where TCP Initial Sequence Numbers (ISNs) are predictable. The ISN predictability enables remote attackers to spoof or hijack TCP connections, with impact described as partial confidentiality, inte...
CVE-2001-0288
Cisco switches and routers running IOS 12.1 and earlier produce predictable TCP Initial Sequence Numbers ISNs, which allows remote attackers to spoof or hijack TCP connections...
CVE-2001-0288: Undefined Security Weakness
Cisco switches and routers running IOS 12.1 and earlier produce predictable TCP Initial Sequence Numbers ISNs, which allows remote attackers to spoof or hijack TCP connections...
CVE-2001-0288
Cisco switches and routers running IOS 12.1 and earlier produce predictable TCP Initial Sequence Numbers ISNs, which allows remote attackers to spoof or hijack TCP connections...
CVE-2001-0162
WinCE 3.0.9348 generates predictable TCP Initial Sequence Numbers ISNs, which allows remote attackers to spoof or hijack TCP connections...
CVE-2001-0163
Cisco AP340 base station produces predictable TCP Initial Sequence Numbers ISNs, which allows remote attackers to spoof or hijack TCP connections...
PT-2001-1393 · Microsoft · Wince
Name of the Vulnerable Software and Affected Versions: WinCE version 3.0.9348 Description: The issue allows remote attackers to spoof or hijack TCP connections due to the generation of predictable TCP Initial Sequence Numbers ISNs. Recommendations: For WinCE version 3.0.9348, at the moment, there...
CVE-2000-0916
FreeBSD 4.1.1 and earlier, and possibly other BSD-based OSes, uses an insufficient random number generator to generate initial TCP sequence numbers ISN, which allows remote attackers to spoof TCP connections...
CVE-2000-0916: Undefined Security Weakness
FreeBSD 4.1.1 and earlier, and possibly other BSD-based OSes, uses an insufficient random number generator to generate initial TCP sequence numbers ISN, which allows remote attackers to spoof TCP connections...
CVE-2000-0916
FreeBSD 4.1.1 and earlier, and possibly other BSD-based OSes, uses an insufficient random number generator to generate initial TCP sequence numbers ISN, which allows remote attackers to spoof TCP connections...
FreeBSD-SA-00:52.tcp-iss
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:52 Security Advisory FreeBSD, Inc. Topic: TCP uses weak initial sequence numbers Category: core Module: kernel Announced: 2000-10-06 Credits: Hacker Emergency Response...
CVE-2000-0328
Windows NT 4.0 generates predictable random TCP initial sequence numbers ISN, which allows remote attackers to perform spoofing and session hijacking...
CVE-2000-0178
ServerIron switches by Foundry Networks have predictable TCP/IP sequence numbers, which allows remote attackers to spoof or hijack sessions...
CVE-2000-0178: Undefined Security Weakness
ServerIron switches by Foundry Networks have predictable TCP/IP sequence numbers, which allows remote attackers to spoof or hijack sessions...
CVE-2000-0178
ServerIron switches by Foundry Networks have predictable TCP/IP sequence numbers, which allows remote attackers to spoof or hijack sessions...
CVE-1999-0599: Undefined Security Weakness
A network intrusion detection system IDS does not properly handle packets with improper sequence numbers...
CVE-1999-0077
CVE-1999-0077 refers to a TCP Initial Sequence Number (ISN) weakness enabling spoofing. The connected documents corroborate ISN predictability as a risk that could allow spoofed TCP connections or session hijacking, with exploitation discussed in multiple scanners/advisories. F5’s advisory explic...