CVE-2002-0514: OpenBSD

Medium severity, CVSS 5.0. EPSS: 2% chance of exploitation in the next 30 days.

PF in OpenBSD 3.0 with the return-rst rule sets the TTL to 128 in the RST packet, which allows remote attackers to determine if a port is being filtered because the TTL is different than the default TTL.

Affected products

• OpenBSD OpenBSD: version 3.0 only

Published 2002-08-12. Last modified 2026-06-16.