The implementation of SYN cookies (syncookies) in FreeBSD 4.5 up to and including 5.0-RELEASE-p3 uses only 32-bit internal keys when generating syncookies, which makes it easier for remote malicious users to conduct brute force ISN guessing attacks and spoof legitimate traffic.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|