|
|
Info |
Last Modified |
| 10 months ago |
|
|
|
|
Description |
Multiple BSDs contain a flaw that may allow a malicious user to spoof TCP connections against BSD hosts on networks that do not filter source routed packets via router packet filters. The issue is triggered when the sysctl system configuration control for "do source route" does not prevent source routed packets from being accepted by 4.4BSD kernels, even when the sysctl variable net.inet.ip.dosourceroute is set to '0'. It is possible that the flaw may result in a loss of integrity.
|
|
Classification |
Location:
Remote/Network Access Required
Attack Type:
Infrastructure
Impact:
Loss of Integrity
Exploit:
Exploit Unavailable
Disclosure:
OSVDB Verified
|
|
Solution |
Currently, there are no known workarounds or upgrades to correct this issue. However, FreeBSD and OpenBSD have released patches to address this vulnerability.
|
|
Products |
|
FreeBSD
 |
2.1 |
2.2.5 |
2.1.5 |
2.1.6 |
2.1.7 |
2.2 |
2.2.1 |
2.2.2 |
|
OpenBSD
|
2.0 |
2.1 |
2.2 |
|
|
|
|
Credit |
Unknown or Incomplete
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
