Lucene search

K
cve[email protected]CVE-2002-0518
HistoryAug 12, 2002 - 4:00 a.m.

CVE-2002-0518

2002-08-1204:00:00
web.nvd.nist.gov
21
freebsd 4.5
syn cache
syn cookie
remote attacks
denial of service
system crash

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.7 Medium

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.3%

The SYN cache (syncache) and SYN cookie (syncookie) mechanism in FreeBSD 4.5 and earlier allows remote attackers to cause a denial of service (crash) (1) via a SYN packet that is accepted using syncookies that causes a null pointer to be referenced for the socket’s TCP options, or (2) by killing and restarting a process that listens on the same socket, which does not properly clear the old inpcb pointer on restart.

Affected configurations

NVD
Node
freebsdfreebsdMatch4.5release
OR
freebsdfreebsdMatch4.5stable
CPENameOperatorVersion
freebsd:freebsdfreebsdeq4.5

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.7 Medium

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.3%

Related for CVE-2002-0518