The implementation of SYN cookies (syncookies) in FreeBSD 4.5 through 5.0-RELEASE-p3 uses only 32-bit internal keys when generating syncookies, which makes it easier for remote attackers to conduct brute force ISN guessing attacks and spoof legitimate traffic.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Freebsd | Freebsd | 4.5-release (including) | 4.5-release (including) |
| Freebsd | Freebsd | 4.6-release (including) | 4.6-release (including) |
| Freebsd | Freebsd | 4.7-release (including) | 4.7-release (including) |
| Freebsd | Freebsd | 4.7-stable (including) | 4.7-stable (including) |
| Freebsd | Freebsd | 5.0-release (including) | 5.0-release (including) |
References
- http://secunia.com/advisories/8142/
- http://www.osvdb.org/19785
- http://www.securityfocus.com/advisories/5013
- http://www.securityfocus.com/bid/6920
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11397
- http://secunia.com/advisories/8142/
- http://www.osvdb.org/19785
- http://www.securityfocus.com/advisories/5013
- http://www.securityfocus.com/bid/6920
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11397