CVE-2007-2782

Packeteer PacketShaper uses fixed increments in TCP initial sequence number (ISN) values, which allows remote attackers to predict the ISN value, and perform session hijacking or disruption.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2007-05-21

Last modified

2024-08-07

Affected products

• Packetshaper (Packeteer)

References

• http://osvdb.org/36226
• http://secunia.com/advisories/25344
• http://securityreason.com/securityalert/2726
• http://www.securityfocus.com/archive/1/468972/100/0/threaded
• http://www.securityfocus.com/bid/24048
• http://www.vupen.com/english/advisories/2007/1891