CVE-2002-0381: Freebsd

Medium severity, CVSS 5.0. EPSS: 2% chance of exploitation in the next 30 days.

The TCP implementation in various BSD operating systems (tcp_input.c) does not properly block connections to broadcast addresses, which could allow remote attackers to bypass intended filters via packets with a unicast link layer address and an IP broadcast address.

Affected products

• Freebsd Freebsd: up to and including 4.5
• Netbsd Netbsd: version 2.0.4 only
• OpenBSD OpenBSD: any version

Published 2002-06-25. Last modified 2026-06-16.