|
|
Info |
Last Modified |
| 4 months ago |
|
|
|
|
Description |
FreeBSD contains a flaw that may allow a malicious user to modify certain TCP options via a TCP packet with the SYN flag set for an already established session. It is possible that the flaw may allow an attacker to spoof the remote IP and port numbers of an established connection and stall the TCP communications resulting in a loss of availability.
|
|
Classification |
Location:
Remote/Network Access Required
Attack Type:
Denial of Service
Impact:
Loss of Availability
Exploit:
Exploit Unavailable
Disclosure:
OSVDB Verified
|
|
Solution |
Upgrade to version 4-STABLE or 5-STABLE, or to the RELENG_5_4, RELENG_5_3, RELENG_4_11, or RELENG_4_10 security branch dated after 2005-06-29, as it has been reported to fix this vulnerability. In addition, FreeBSD has released patches for older FreeBSD 4.10, 4.11, 5.3, and 5.4 systems.
|
|
Products |
|
FreeBSD
 |
4.10 |
5.3 |
5.4 |
4.11 |
|
|
|
|
Credit |
Unknown or Incomplete
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
