Unscored CVE-2003-1230 EUVD-2003-1220GHSA-7hx3-c6gv-rvgg

The implementation of SYN cookies (syncookies) in FreeBSD 4.5 through 5.0-RELEASE-p3 uses only 32-bit internal keys when generating syncook…

Published Aug 17, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

The implementation of SYN cookies (syncookies) in FreeBSD 4.5 through 5.0-RELEASE-p3 uses only 32-bit internal keys when generating syncookies, which makes it easier for remote attackers to conduct brute force ISN guessing attacks and spoof legitimate traffic.

References

19785 vdb-entry
freebsd-syncookie-brute-force(11397) vdb-entry
6920 vdb-entry
8142 third-party-advisory
FreeBSD-SA-03:03 vendor-advisory