ID |
CVE-2002-0518
|
Summary |
The SYN cache (syncache) and SYN cookie (syncookie) mechanism in FreeBSD 4.5 and earlier allows remote attackers to cause a denial of service (crash) (1) via a SYN packet that is accepted using syncookies that causes a null pointer to be referenced for the socket's TCP options, or (2) by killing and restarting a process that listens on the same socket, which does not properly clear the old inpcb pointer on restart. |
References |
|
Vulnerable Configurations |
|
CVSS |
Base: | 5.0 (as of 05-09-2008 - 20:28) |
Impact: | |
Exploitability: | |
|
CWE |
NVD-CWE-Other |
CAPEC |
|
Access |
Vector | Complexity | Authentication |
NETWORK |
LOW |
NONE |
|
Impact |
Confidentiality | Integrity | Availability |
NONE |
NONE |
PARTIAL |
|
cvss-vector
via4
|
AV:N/AC:L/Au:N/C:N/I:N/A:P
|
refmap
via4
|
bid | 4524 | freebsd | FreeBSD-SA-02:20 | osvdb | 6046 | xf | - bsd-syncache-inpcb-dos(8875)
- bsd-syncookie-pointer-dos(8873)
|
|
Last major update |
05-09-2008 - 20:28 |
Published |
12-08-2002 - 04:00 |
Last modified |
05-09-2008 - 20:28 |