Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

HP Tru64 Initial Random TCP Sequence Number DoS Vulnerability

HP Tru64 Unix uses predictable initial TCP sequence numbers (ISN)s. According to HP, a denial of service attack is possible. Administrators should keep in mind that TCP implementations with weak ISN generation are typically exploited to perform man-in-the-middle attacks and session hijacking.







 

Privacy Statement
Copyright 2009, SecurityFocus