Predictable TCP ISN in Packeteer PacketShaper

Predictable TCP ISN in Packeteer PacketShaper Critical: Less critical Impact: Connection spoofing, DoS Where: Local network Product: Packeteer PacketShaper http://www.packetshaper.com/ Description: The TCP/IP stack of Packeteer PacketShaper is generating predictable initial sequence numbers ISN:...

CVE-2003-1230

CVE-2003-1230 affects FreeBSD 4.5–5.0-RELEASE-p3 where SYN cookies are generated with 32-bit internal keys, enabling remote ISN-guessing/brute-force spoofing of traffic. Exploitation specifics and remediation are not provided in the supplied documents.

CVE-2001-0163

Cisco AP340 base station produces predictable TCP Initial Sequence Numbers ISNs, which allows remote attackers to spoof or hijack TCP connections...

HP-UX PHNE_26771 : HP-UX Running ARPA Transport, Advisory, RFC 1948 ISN Randomization (HPSBUX00205 SSRT080009 rev.3)

s700800 11.00 cumulative ARPA Transport patch : TCP Initial Sequence Number ISN randomization specified in RFC 1948 is available for HP-UX. References: CVE-2001-0328, CERT CA-2001-09. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were...

HP-UX PHNE_26101 : HP-UX Running ARPA Transport, Advisory, RFC 1948 ISN Randomization (HPSBUX00205 SSRT080009 rev.3)

s700800 11.04 VVOS cumulative ARPA Transport patch : TCP Initial Sequence Number ISN randomization specified in RFC 1948 is available for HP-UX. References: CVE-2001-0328, CERT CA-2001-09. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin we...

CVE-2002-1463

CVE-2002-1463 describes a weakness where Symantec Raptor Firewall family devices (Raptor Firewall 6.5/6.5.3, Enterprise Firewall 6.5.2/7.0, VelociRaptor 500/700/1000 and 1100/1200/1300, Gateway Security 5110/5200/5300) generate easily predictable initial sequence numbers (ISN), enabling remote sp...

CVE-2003-1230

The implementation of SYN cookies syncookies in FreeBSD 4.5 through 5.0-RELEASE-p3 uses only 32-bit internal keys when generating syncookies, which makes it easier for remote attackers to conduct brute force ISN guessing attacks and spoof legitimate traffic...

FreeBSD-SA-03:03.syncookies

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-03:03.syncookies Security Advisory The FreeBSD Project Topic: Brute force attack on SYN cookies Category: core Module: sysnetinet Announced: 2003-02-24 Credits:...

CVE-2001-0751

The CVE-2001-0751 entry affects Cisco switches/routers running CBOS 2.3.8 and earlier, where predictable TCP Initial Sequence Numbers enable an attacker to spoof or hijack TCP connections. The vulnerability can allow remote connection spoofing without authentication, leading to partial confidenti...

CVE-1999-1150

The CVE-1999-1150 entry concerns Livingston Portmaster routers running ComOS that use the same initial sequence number (ISN) for TCP connections. This reuse allows remote attackers to spoof TCP connections and hijack sessions, as described in the provided description. The vulnerability is rated C...

CVE-2001-0328

TCP implementations that use random increments for initial sequence numbers ISN can allow remote attackers to perform session hijacking or disruption by injecting a flood of packets with a range of ISN values, one of which may match the expected ISN...

CVE-2001-0328

CVE-2001-0328 describes a vulnerability in TCP initial sequence number (ISN) generation where random increments can enable remote attackers to hijack sessions or disrupt traffic by sending a flood of packets with varying ISNs. Connected documents show this is discussed across multiple UNIX system...

CVE-2000-0916

CVE-2000-0916 is a historical TCP-ISN prediction vulnerability affecting FreeBSD 4.1.1 and earlier (and possibly other BSD-based OSes). The root cause is an insufficient random initial sequence number (ISN) generator, enabling remote attackers to spoof TCP connections. Several connected sources c...