Details of VAR-200105-0093

ID

VAR-200105-0093

CVE

CVE-2001-0288

TITLE

Cisco Switch and router vulnerabilities

Trust: 0.8

sources: IVD: c8f9ca16-23ce-11e6-abef-000c29c66e3d // CNNVD: CNNVD-200105-050

DESCRIPTION

Cisco switches and routers running IOS 12.1 and earlier produce predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections. Over the past several years, a variety of attacks against TCP initial sequence number (ISN) generation have been discussed. A vulnerability exists in some TCP/IP stack implementations that use random increments for initial sequence numbers. Such implementations are vulnerable to statistical attack, which could allow an attacker to predict, within a reasonable range, sequence numbers of future and existing connections. By predicting a sequence number, several attacks could be performed; an attacker could disrupt or hijack existing connections, or spoof future connections

Trust: 1.44

sources: NVD: CVE-2001-0288 // BID: 2682 // IVD: c8f9ca16-23ce-11e6-abef-000c29c66e3d // VULHUB: VHN-3110

IOT TAXONOMY

category:

['ICS']

sub_category:

Trust: 0.2

sources: IVD: c8f9ca16-23ce-11e6-abef-000c29c66e3d

AFFECTED PRODUCTS

vendor:	cisco	model:	ios	scope:	lte	version:	12.1	Trust: 1.0
vendor:	cisco	model:	ios	scope:	eq	version:	12.1	Trust: 0.9
vendor:	cisco	model:	ios 11.2 xa	scope:	-	version:	-	Trust: 0.6
vendor:	sun	model:	solaris	scope:	eq	version:	7.0	Trust: 0.3
vendor:	sgi	model:	irix m	scope:	eq	version:	6.5.14	Trust: 0.3
vendor:	sgi	model:	irix f	scope:	eq	version:	6.5.14	Trust: 0.3
vendor:	sgi	model:	irix	scope:	eq	version:	6.5.14	Trust: 0.3
vendor:	sgi	model:	irix m	scope:	eq	version:	6.5.13	Trust: 0.3
vendor:	sgi	model:	irix f	scope:	eq	version:	6.5.13	Trust: 0.3
vendor:	sgi	model:	irix	scope:	eq	version:	6.5.13	Trust: 0.3
vendor:	sgi	model:	irix m	scope:	eq	version:	6.5.12	Trust: 0.3
vendor:	sgi	model:	irix f	scope:	eq	version:	6.5.12	Trust: 0.3
vendor:	sgi	model:	irix	scope:	eq	version:	6.5.12	Trust: 0.3
vendor:	sgi	model:	irix m	scope:	eq	version:	6.5.11	Trust: 0.3
vendor:	sgi	model:	irix f	scope:	eq	version:	6.5.11	Trust: 0.3
vendor:	sgi	model:	irix	scope:	eq	version:	6.5.11	Trust: 0.3
vendor:	sgi	model:	irix m	scope:	eq	version:	6.5.10	Trust: 0.3
vendor:	sgi	model:	irix f	scope:	eq	version:	6.5.10	Trust: 0.3
vendor:	sgi	model:	irix	scope:	eq	version:	6.5.10	Trust: 0.3
vendor:	sgi	model:	irix m	scope:	eq	version:	6.5.9	Trust: 0.3
vendor:	sgi	model:	irix f	scope:	eq	version:	6.5.9	Trust: 0.3
vendor:	sgi	model:	irix	scope:	eq	version:	6.5.9	Trust: 0.3
vendor:	sgi	model:	irix m	scope:	eq	version:	6.5.8	Trust: 0.3
vendor:	sgi	model:	irix f	scope:	eq	version:	6.5.8	Trust: 0.3
vendor:	sgi	model:	irix	scope:	eq	version:	6.5.8	Trust: 0.3
vendor:	sgi	model:	irix m	scope:	eq	version:	6.5.7	Trust: 0.3
vendor:	sgi	model:	irix f	scope:	eq	version:	6.5.7	Trust: 0.3
vendor:	sgi	model:	irix	scope:	eq	version:	6.5.7	Trust: 0.3
vendor:	sgi	model:	irix m	scope:	eq	version:	6.5.6	Trust: 0.3
vendor:	sgi	model:	irix f	scope:	eq	version:	6.5.6	Trust: 0.3
vendor:	sgi	model:	irix	scope:	eq	version:	6.5.6	Trust: 0.3
vendor:	sgi	model:	irix m	scope:	eq	version:	6.5.5	Trust: 0.3
vendor:	sgi	model:	irix f	scope:	eq	version:	6.5.5	Trust: 0.3
vendor:	sgi	model:	irix	scope:	eq	version:	6.5.5	Trust: 0.3
vendor:	sgi	model:	irix m	scope:	eq	version:	6.5.4	Trust: 0.3
vendor:	sgi	model:	irix f	scope:	eq	version:	6.5.4	Trust: 0.3
vendor:	sgi	model:	irix	scope:	eq	version:	6.5.4	Trust: 0.3
vendor:	sgi	model:	irix m	scope:	eq	version:	6.5.3	Trust: 0.3
vendor:	sgi	model:	irix f	scope:	eq	version:	6.5.3	Trust: 0.3
vendor:	sgi	model:	irix	scope:	eq	version:	6.5.3	Trust: 0.3
vendor:	sgi	model:	irix m	scope:	eq	version:	6.5.2	Trust: 0.3
vendor:	sgi	model:	irix f	scope:	eq	version:	6.5.2	Trust: 0.3
vendor:	sgi	model:	irix	scope:	eq	version:	6.5.2	Trust: 0.3
vendor:	sgi	model:	irix	scope:	eq	version:	6.5.1	Trust: 0.3
vendor:	sgi	model:	irix	scope:	eq	version:	6.5	Trust: 0.3
vendor:	openbsd	model:	openbsd	scope:	eq	version:	2.8	Trust: 0.3
vendor:	microsoft	model:	windows nt workstation sp6a	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt workstation sp6	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt workstation sp5	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt workstation sp4	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt workstation sp3	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt workstation sp2	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt workstation sp1	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt workstation	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt terminal server sp6	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt terminal server sp5	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt terminal server sp4	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt terminal server sp3	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt terminal server sp2	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt terminal server sp1	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt terminal server	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt server sp6a	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt server sp6	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt server sp5	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt server sp4	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt server sp3	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt server sp2	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt server sp1	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt server	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt enterprise server sp6a	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt enterprise server sp6	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt enterprise server sp5	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt enterprise server sp4	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt enterprise server sp3	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt enterprise server sp2	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt enterprise server sp1	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt enterprise server	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt sp6	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt sp5	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt sp4	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt sp3	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt sp2	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt sp1	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows 98se	scope:	-	version:	-	Trust: 0.3
vendor:	microsoft	model:	windows	scope:	eq	version:	98	Trust: 0.3
vendor:	microsoft	model:	windows	scope:	eq	version:	95	Trust: 0.3
vendor:	linux	model:	kernel	scope:	eq	version:	2.1.x	Trust: 0.3
vendor:	linux	model:	kernel	scope:	eq	version:	2.0.x	Trust: 0.3
vendor:	ibm	model:	aix	scope:	eq	version:	4.3	Trust: 0.3
vendor:	hp	model:	hp-ux	scope:	eq	version:	11.11	Trust: 0.3
vendor:	hp	model:	hp-ux	scope:	eq	version:	11.04	Trust: 0.3
vendor:	hp	model:	hp-ux	scope:	eq	version:	11.0	Trust: 0.3
vendor:	hp	model:	hp-ux	scope:	eq	version:	10.20	Trust: 0.3
vendor:	hp	model:	hp-ux	scope:	eq	version:	10.0	Trust: 0.3
vendor:	freebsd	model:	-stablepre050201	scope:	eq	version:	4.2	Trust: 0.3
vendor:	freebsd	model:	-stablepre050201	scope:	eq	version:	3.5	Trust: 0.3
vendor:	cisco	model:	ios 12.1yd	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.1yc	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.1yb	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.1ya	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.1xz	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.1xy	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios	scope:	eq	version:	12.1xx	Trust: 0.3
vendor:	cisco	model:	ios 12.1xw	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios	scope:	eq	version:	12.1xv	Trust: 0.3
vendor:	cisco	model:	ios 12.1xu	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.1xt	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.1xs	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.1xr	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.1xq	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.1xp	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.1xm	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.1xl	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.1xk	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.1xj	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.1xi	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.1xh	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.1xg	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.1xf	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.1xe	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.1xd	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.1xc	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.1xb	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.1xa	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.1t	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.1ex	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.1ec	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.1e	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.1dc	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.1db	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.1da	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.1cx	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.1aa	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios	scope:	eq	version:	12.0xv	Trust: 0.3
vendor:	cisco	model:	ios 12.0xu	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.0xs	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.0xr	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.0xq	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.0xp	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.0xn	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.0xm	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.0xl	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.0xk	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.0xj	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.0xi	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.0xh	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.0xg	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.0xf	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.0xe	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.0xd	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.0xc	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.0xb	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.0xa	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.0wt	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.0w5	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.0t	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.0sx	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.0st	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.0sl	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.0sc	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.0s	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.0dc	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.0db	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.0da	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios	scope:	eq	version:	12.0	Trust: 0.3
vendor:	cisco	model:	ios 11.3wa4	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 11.3t	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 11.3na	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 11.3ma	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 11.3ha	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 11.3db	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 11.3da	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 11.3aa	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 11.3 xa	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios	scope:	eq	version:	11.3	Trust: 0.3
vendor:	cisco	model:	ios 11.2wa3	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 11.2sa	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 11.2p	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 11.2gs	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 11.2f	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 11.2bc	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios	scope:	eq	version:	11.2	Trust: 0.3
vendor:	cisco	model:	ios 11.1ia	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 11.1ct	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 11.1cc	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 11.1ca	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 11.1aa	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios	scope:	eq	version:	11.1	Trust: 0.3
vendor:	cisco	model:	ios	scope:	eq	version:	11.0	Trust: 0.3
vendor:	bsdi	model:	bsd/os	scope:	eq	version:	4.0	Trust: 0.3
vendor:	bsdi	model:	bsd/os	scope:	eq	version:	3.0	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	x10.0.2	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	x10.0.1	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	x10.0	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	99.1	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	99.0.4	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	99.0	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	88.6	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	88.5	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	88.1	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	88.0	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	77.6.1	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	77.6	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	77.5.3	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	77.5.2	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	77.5.1	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	77.1.2	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	77.1	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	77.0.1	Trust: 0.3
vendor:	apple	model:	mac os	scope:	eq	version:	77.0	Trust: 0.3
vendor:	abb	model:	rtu500 series	scope:	eq	version:	11.3	Trust: 0.3
vendor:	linux	model:	kernel	scope:	ne	version:	2.2.x	Trust: 0.3
vendor:	abb	model:	rtu500 series	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	ios	model:	-	scope:	eq	version:	*	Trust: 0.2

sources: IVD: c8f9ca16-23ce-11e6-abef-000c29c66e3d // BID: 2682 // CNNVD: CNNVD-200105-050 // NVD: CVE-2001-0288

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2001-0288
value:	HIGH
Trust: 1.0
CNNVD:	CNNVD-200105-050
value:	HIGH
Trust: 0.6
IVD:	c8f9ca16-23ce-11e6-abef-000c29c66e3d
value:	HIGH
Trust: 0.2
VULHUB:	VHN-3110
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2001-0288
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.0
IVD:	c8f9ca16-23ce-11e6-abef-000c29c66e3d
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.9 [IVD]
Trust: 0.2
VULHUB:	VHN-3110
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: IVD: c8f9ca16-23ce-11e6-abef-000c29c66e3d // VULHUB: VHN-3110 // CNNVD: CNNVD-200105-050 // NVD: CVE-2001-0288

PROBLEMTYPE DATA

problemtype:

NVD-CWE-Other

Trust: 1.0

sources: NVD: CVE-2001-0288

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-200105-050

TYPE

unknown

Trust: 0.8

sources: IVD: c8f9ca16-23ce-11e6-abef-000c29c66e3d // CNNVD: CNNVD-200105-050

EXPLOIT AVAILABILITY

sources: VULHUB: VHN-3110

EXTERNAL IDS

db:	NVD	id:	CVE-2001-0288	Trust: 2.2
db:	CNNVD	id:	CNNVD-200105-050	Trust: 0.9
db:	CISCO	id:	20010228 CISCO IOS SOFTWARE TCP INITIAL SEQUENCE NUMBER RANDOMIZATION IMPROVEMENTS	Trust: 0.6
db:	CERT/CC	id:	VU#498440	Trust: 0.3
db:	BID	id:	2682	Trust: 0.3
db:	IVD	id:	C8F9CA16-23CE-11E6-ABEF-000C29C66E3D	Trust: 0.2
db:	EXPLOIT-DB	id:	19522	Trust: 0.1
db:	VULHUB	id:	VHN-3110	Trust: 0.1

sources: IVD: c8f9ca16-23ce-11e6-abef-000c29c66e3d // VULHUB: VHN-3110 // BID: 2682 // CNNVD: CNNVD-200105-050 // NVD: CVE-2001-0288

REFERENCES

url:	http://www.cisco.com/warp/public/707/ios-tcp-isn-random-pub.shtml	Trust: 1.7
url:	http://razor.bindview.com/publish/papers/tcpseq.html	Trust: 0.3
url:	http://www.kb.cert.org/vuls/id/498440	Trust: 0.3
url:	https://library.e.abb.com/public/03edbe8b0bed400a8b294347be5d66ab/abb_softwarevulnerabilityhandlingadvisory_abb-vu-pgga-1kgt090284.pdf	Trust: 0.3

sources: VULHUB: VHN-3110 // BID: 2682 // CNNVD: CNNVD-200105-050 // NVD: CVE-2001-0288

CREDITS

Originally discovered by Tim Newsham <tim.newsham@guardent.com>.

Trust: 0.3

sources: BID: 2682

SOURCES

db:	IVD	id:	c8f9ca16-23ce-11e6-abef-000c29c66e3d
db:	VULHUB	id:	VHN-3110
db:	BID	id:	2682
db:	CNNVD	id:	CNNVD-200105-050
db:	NVD	id:	CVE-2001-0288

LAST UPDATE DATE

2024-09-09T20:37:24.607000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-3110	date:	2008-09-05T00:00:00
db:	BID	id:	2682	date:	2016-10-26T05:08:00
db:	CNNVD	id:	CNNVD-200105-050	date:	2005-05-02T00:00:00
db:	NVD	id:	CVE-2001-0288	date:	2008-09-05T20:23:44.790

SOURCES RELEASE DATE

db:	IVD	id:	c8f9ca16-23ce-11e6-abef-000c29c66e3d	date:	2001-05-03T00:00:00
db:	VULHUB	id:	VHN-3110	date:	2001-05-03T00:00:00
db:	BID	id:	2682	date:	2001-03-14T00:00:00
db:	CNNVD	id:	CNNVD-200105-050	date:	2001-05-03T00:00:00
db:	NVD	id:	CVE-2001-0288	date:	2001-05-03T04:00:00