FreeBSD 4.1.1 and earlier, and possibly other BSD-based OSes, uses an insufficient random number generator to generate initial TCP sequence numbers (ISN), which allows remote attackers to spoof TCP c…

Info

CVECVE-2000-0916

First seen2026-09-23 11:16 UTC

Disclosed+032936-04-19 08 UTC

Last updated2026-09-23 11:16 UTC

Channel statusauto

Summary

FreeBSD 4.1.1 and earlier, and possibly other BSD-based OSes, uses an insufficient random number generator to generate initial TCP sequence numbers (ISN), which allows remote attackers to spoof TCP connections.

In-depth triage

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Affected products

Sources

NVD DATABASE

Original Links

ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:52.tcp-iss.asc Patch
http://www.securityfocus.com/bid/1766 Patch
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:52.tcp-iss.asc Patch
http://www.securityfocus.com/bid/1766 Patch

Timeline

2026-09-23 nvd_ingest NVD