CVE-2003-1230

Severity: medium (CVSS 6.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2003-12-31 · updated 2026-06-16

Description

The implementation of SYN cookies (syncookies) in FreeBSD 4.5 through 5.0-RELEASE-p3 uses only 32-bit internal keys when generating syncookies, which makes it easier for remote attackers to conduct brute force ISN guessing attacks and spoof legitimate traffic.

References

http://secunia.com/advisories/8142/
http://www.osvdb.org/19785
http://www.securityfocus.com/advisories/5013
http://www.securityfocus.com/bid/6920
https://exchange.xforce.ibmcloud.com/vulnerabilities/11397
http://secunia.com/advisories/8142/
http://www.osvdb.org/19785
http://www.securityfocus.com/advisories/5013
http://www.securityfocus.com/bid/6920
https://exchange.xforce.ibmcloud.com/vulnerabilities/11397

Get alerted when CVE-2003-1230 or the next vulnerability affects your stack