The TCP stack in 4.3BSD Net/2, as used in FreeBSD 5.4, NetBSD possibly 2.0, and OpenBSD possibly 3.6, does not properly implement the session timer, which allows remote malicious users to cause a denial of service (resource consumption) via crafted packets.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
openbsd openbsd 3.6 |
||
netbsd netbsd 2.0 |
||
freebsd freebsd 5.4 |
||
bsd bsd 4.3 |
Vulmon