← Database

CVE-2000-0916

HIGH CVSS: 7.5 Published: 2000-12-19 Modified: 2026-06-16

Description

FreeBSD 4.1.1 and earlier, and possibly other BSD-based OSes, uses an insufficient random number generator to generate initial TCP sequence numbers (ISN), which allows remote attackers to spoof TCP connections.

Affected Platforms

Freebsd Freebsd

Weakness Type

NVD-CWE-Other

References