CVE-2000-0916: Freebsd

High severity, CVSS 7.5. EPSS: 5.5% chance of exploitation in the next 30 days.

FreeBSD 4.1.1 and earlier, and possibly other BSD-based OSes, uses an insufficient random number generator to generate initial TCP sequence numbers (ISN), which allows remote attackers to spoof TCP connections.

Affected products

• Freebsd Freebsd: version 2.0 only; version 3.0 only; version 4.0 only; version 4.1 only; version 4.1.1 only

Published 2000-12-19. Last modified 2026-09-23.