A certain pseudo-random number generator (PRNG) algorithm that uses ADD with 0 random hops (aka "Algorithm A0"), as used in OpenBSD 3.5 up to and including 4.2 and NetBSD 1.6.2 up to and including 4.0, allows remote malicious users to guess sensitive values such as (1) DNS transaction IDs or (2) IP fragmentation IDs by observing a sequence of previously generated values. NOTE: this issue can be leveraged for attacks such as DNS cache poisoning, injection into TCP packets, and OS fingerprinting.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
cosmicperl directory_pro 10.0.3 |
||
navision financials_server 3.0 |
||
darwin darwin 1.0 |
||
darwin darwin 9.1 |
Vulmon