In NetBSD up to and including 9.2, there is an information leak in the TCP ISN (ISS) generation algorithm.
netbsd netbsd