CVE-2001-0288

Cisco switches and routers running IOS 12.1 and earlier produce predictable TCP Initial Sequence Numbers ISNs, which allows remote attackers to spoof or hijack TCP connections...

CVE-2001-0288

CVE-2001-0288 pertains to Cisco IOS devices (notably switches/routers running IOS 12.1 and earlier) where TCP Initial Sequence Numbers (ISNs) are predictable. The ISN predictability enables remote attackers to spoof or hijack TCP connections, with impact described as partial confidentiality, inte...

CVE-2001-0288

Cisco switches and routers running IOS 12.1 and earlier produce predictable TCP Initial Sequence Numbers ISNs, which allows remote attackers to spoof or hijack TCP connections...

Advisory CA-2001-09

-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2001-09 Statistical Weaknesses in TCP/IP Initial Sequence Numbers Original release date: May 01, 2001 Last revised: -- Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affected Systems using TCP stacks...

Multiple TCP/IP implementations may use statistically predictable initial sequence numbers

Overview Attacks against TCP initial sequence number generation have been discussed for some time now. It has long been recognized that the ability to know or predict ISNs can lead to TCP connection hijacking or spoofing. What was not previously illustrated was just how predictable one...

Cisco Security Advisory: Cisco IOS Software TCP Initial Sequence NumberRandomization Improvements

-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory: Cisco IOS Software TCP Initial Sequence Number Randomization Improvements Revision 1.0: INTERIM For Public Release 2001 February 28 18:00 US/Pacific UTC+0800 ------------------------------------------------------------------------ Summar...

CVE-2000-0542

Tigris remote access server before 11.5.4.22 does not properly record Radius accounting information when a user fails the initial login authentication but subsequently succeeds...

CVE-2001-0162

WinCE 3.0.9348 generates predictable TCP Initial Sequence Numbers ISNs, which allows remote attackers to spoof or hijack TCP connections...

CVE-2001-0163

Cisco AP340 base station produces predictable TCP Initial Sequence Numbers ISNs, which allows remote attackers to spoof or hijack TCP connections...

PT-2001-1393 · Microsoft · Wince

Name of the Vulnerable Software and Affected Versions: WinCE version 3.0.9348 Description: The issue allows remote attackers to spoof or hijack TCP connections due to the generation of predictable TCP Initial Sequence Numbers ISNs. Recommendations: For WinCE version 3.0.9348, at the moment, there...

PT-2000-1082 · Red Hat · Red Hat

Name of the Vulnerable Software and Affected Versions: Red Hat affected versions not specified Description: The issue is related to the use of DES password encryption with crypt for the initial password in Red Hat installations, instead of using md5 encryption. Recommendations: At the moment, the...

CVE-1999-1233

IIS 4.0 does not properly restrict access for the initial session request from a user's IP address if the address does not resolve to a DNS domain, aka the "Domain Resolution" vulnerability...

Linux Kernel 2.2 - Predictable TCP Initial Sequence Number

source: https://www.securityfocus.com/bid/670/info A vulnerability in the Linux kernel allows remote users to guess the initial sequence number of TCP sessions. This can be used to create spoofed TCP sessions bypassing some types of IP based access controls. The function 'securetcpsequencenumber'...

Linux Kernel 2.2 - Predictable TCP Initial Sequence Number

Linux Kernel 2.2 - Predictable TCP Initial Sequence Number source: https://www.securityfocus.com/bid/670/info A vulnerability in the Linux kernel allows remote users to guess the initial sequence number of TCP sessions. This can be used to create spoofed TCP sessions bypassing some types of IP...

CVE-2000-0328

Windows NT 4.0 generates predictable random TCP initial sequence numbers ISN, which allows remote attackers to perform spoofing and session hijacking...

CVE-1999-1505

Buffer overflow in QuakeWorld 2.10 allows remote attackers to cause a denial of service crash and possibly execute arbitrary commands via a long initial connect packet...

SQL Server 2019 RTM Cumulative Update (CU) 2 KB4536075

SQL Server 2019 RTM Cumulative Update CU 2 KB4536075...

Exclude IMC

Ensures that update is only targeted on the machines that did not have an Initial Machine Configuration IMC...

Security update 1970-01-01

...