CVE-2000-0916: High severity FreeBSD FreeBSD vulnerability
FreeBSD 4.1.1 and earlier, and possibly other BSD-based OSes, uses an insufficient random number generator to generate initial TCP sequence numbers (ISN), which allows remote attackers to spoof TCP connections.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0916?
CVE-2000-0916 has a high severity due to its potential to allow TCP spoofing attacks.
How do I fix CVE-2000-0916?
To fix CVE-2000-0916, upgrade to FreeBSD version 4.1.2 or later that includes enhancements to the random number generator.
What systems are affected by CVE-2000-0916?
CVE-2000-0916 affects FreeBSD versions 4.1.1 and earlier, as well as potentially other BSD-based operating systems.
What type of attack does CVE-2000-0916 facilitate?
CVE-2000-0916 facilitates TCP connection spoofing attacks, allowing remote attackers to impersonate legitimate connections.
Is CVE-2000-0916 still a concern today?
While CVE-2000-0916 is an older vulnerability, it remains a concern for legacy systems still using vulnerable versions of FreeBSD.