CVE-2001-0328
Summary
| CVE | CVE-2001-0328 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2001-06-27 04:00:00 UTC |
| Updated | 2025-04-03 01:03:51 UTC |
| Description | TCP implementations that use random increments for initial sequence numbers (ISN) can allow remote attackers to perform session hijacking or disruption by injecting a flood of packets with a range of ISN values, one of which may match the expected ISN. |
Risk And Classification
Primary CVSS: v2.0 5 from [email protected]
AV:N/AC:L/Au:N/C:N/I:N/A:P
Problem Types: NVD-CWE-Other | n/a
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
NoneConfidentiality
NoneIntegrity
NoneAvailability
PartialAV:N/AC:L/Au:N/C:N/I:N/A:P
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| VxWorks Predictable TCP Sequence Number Generation Lets Remote Users Deny Service or Spoof Connections - SecurityTracker | af854a3a-2127-422b-91ae-364da2661108 | www.securitytracker.com | |
| Repository / Oval Repository | af854a3a-2127-422b-91ae-364da2661108 | oval.cisecurity.org | |
| patches.sgi.com/support/free/security/advisories/20030201-01-P | af854a3a-2127-422b-91ae-364da2661108 | patches.sgi.com | |
| Multiple Vendor TCP Initial Sequence Number Statistical Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| SecurityReason - HP Tru64 UNIX TCP/IP remote Denial of Service (DoS) | af854a3a-2127-422b-91ae-364da2661108 | securityreason.com | |
| myF5 | af854a3a-2127-422b-91ae-364da2661108 | support.f5.com | |
| Secunia - Advisories - SGI IRIX Multiple Vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| 2001 CERT Advisories | af854a3a-2127-422b-91ae-364da2661108 | www.cert.org | Patch, Third Party Advisory, US Government Resource |
| CONFIRM:https://support.f5.com/csp/article/K19063943?utm_source=f5support&utm_medium=RSS | MITRE | support.f5.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 591377 ABB Relion 670 series Version 2.0 Transmission Control Protocol (TCP) Predictability Multiple Vulnerabilities (1MRG023264)
- 591383 ABB RTU500 series "Transmission Control Protocol (TCP) Predictability Multiple Vulnerabilities (ABB-VU-PGGA-1KGT090284)
- 591384 ABB Relion 670 series "Transmission Control Protocol (TCP) Predictability Multiple Vulnerabilities (1MRG028797)