OSVDB ID: 17677 Title: FreeBSD TCP Crafted SYN Packet Arbitrary Option Overwrite |
Info |
|
|
Dates |
||||
|
|
Description |
FreeBSD contains a flaw that may allow a malicious user to modify certain TCP options via a TCP packet with the SYN flag set for an already established session. It is possible that the flaw may allow an attacker to spoof the remote IP and port numbers of an established connection and stall the TCP communications resulting in a loss of availability. |
Classification |
Location:
Remote/Network Access Required
Attack Type: Denial of Service Impact: Loss of Availability Exploit: Exploit Unavailable Disclosure: OSVDB Verified |
Solution |
Upgrade to version 4-STABLE or 5-STABLE, or to the RELENG_5_4, RELENG_5_3, RELENG_4_11, or RELENG_4_10 security branch dated after 2005-06-29, as it has been reported to fix this vulnerability. In addition, FreeBSD has released patches for older FreeBSD 4.10, 4.11, 5.3, and 5.4 systems. |
Products |
|
References |
|
Credit |
Unknown or Incomplete |