A certain pseudo-random number generator (PRNG) algorithm that uses XOR and 2-bit random hops (aka "Algorithm X2"), as used in OpenBSD 2.6 up to and including 3.4, Mac OS X 10 up to and including 10.5.1, FreeBSD 4.4 up to and including 7.0, and DragonFlyBSD 1.0 up to and including 1.10.1, allows remote malicious users to guess sensitive values such as IP fragmentation IDs by observing a sequence of previously generated values. NOTE: this issue can be leveraged for attacks such as injection into TCP packets and OS fingerprinting.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
cosmicperl directory_pro 10.0.3 |
||
darwin darwin 1.0 |
||
darwin darwin 9.1 |
||
navision financials_server 3.0 |
Vulmon