EDB-19458

functional

Linux Kernel 2.0.30/2.0.35/2.0.36/2.0.37 - Blind TCP Spoofing

view exploit source exploit_dbverifiedtype remoteauthor Nergalpublished 1999-07-31catalog exploit_db

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-1999-0414US	medium5.0OT elevated	6.86% (94th)	Exploit	1999-03-01
In Linux before version 2.0.36, remote attackers can spoof a TCP connection and pass data to the application layer before fully establishing the connection.
CVE-1999-0426US	critical9.8OT high	10.8% (96th)	Exploit	1999-03-01
The default permissions of /dev/kmem in Linux versions before 2.0.36 allows IP spoofing.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.