EDB-19522

functional

Linux Kernel 2.2 - Predictable TCP Initial Sequence Number

view exploit source exploit_dbverifiedtype remoteauthor Stealth & S. Krahmerpublished 1999-09-27catalog exploit_db
01

exploited CVEs (10)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2004-0641UShigh7.5Exploit
Thomson SpeedTouch 510 ADSL Router with firmware GV8BAA3.270, and possibly earlier versions, generates predictable TCP Initial Sequence Numbers (ISNs), which allows remote attacker…
CVE-2002-1463UShigh7.5OT elevatedExploit
Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor Models 500/700/1000 and 1100/1200/1300, and Gateway Security 5110/5200/5300 generate easily…
CVE-2001-0751UShigh7.5Exploit
Cisco switches and routers running CBOS 2.3.8 and earlier use predictable TCP Initial Sequence Numbers (ISN), which allows remote attackers to spoof or hijack TCP connections.
CVE-2001-1104UShigh7.5OT elevatedExploit
SonicWALL SOHO uses easily predictable TCP sequence numbers, which allows remote attackers to spoof or hijack sessions.
CVE-2001-0328USmedium5.0OT elevatedExploit
TCP implementations that use random increments for initial sequence numbers (ISN) can allow remote attackers to perform session hijacking or disruption by injecting a flood of pack…
CVE-2001-0288UShigh7.5Exploit
Cisco switches and routers running IOS 12.1 and earlier produce predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections.
CVE-2001-0162UShigh7.5Exploit
WinCE 3.0.9348 generates predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections.
CVE-2001-0163USmedium4.6Exploit
Cisco AP340 base station produces predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections.
CVE-2000-0916UShigh7.5OT elevatedExploit
FreeBSD 4.1.1 and earlier, and possibly other BSD-based OSes, uses an insufficient random number generator to generate initial TCP sequence numbers (ISN), which allows remote attac…
CVE-1999-0077USmedium5.0Exploit
Predictable TCP sequence numbers allow spoofing.
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan