A race condition between the select() and accept() calls in NetBSD TCP servers allows remote malicious users to cause a denial of service.
netbsd netbsd 2.0.4
openbsd openbsd 2.4