CVE-2002-0381

No fix known EPSS 2%

The TCP implementation in various BSD operating systems (tcp_input.c) does not properly block connections to broadcast addresses, which could allow remote attackers to bypass intended filters via packets with a unicast link layer address and an IP broadcast address.

Published 2003-04-02 · CVE record · OSV

Products: freebsd, netbsd, openbsd