CVE-2001-0751

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Cisco switches and routers running CBOS 2.3.8 and earlier use predictable TCP Initial Sequence Numbers (ISN), which allows remote attackers to spoof or hijack TCP connections.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.cisco.com/warp/public/707/CBOS-multiple2-pub.htmlPatch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/139
http://www.cisco.com/warp/public/707/CBOS-multiple2-pub.htmlPatch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/139

Timeline

Published: Oct 18, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-07525.0Cisco CBOS 2.3.8 and earlier allows remote attackers to cause a denial of service via an ICMP ECHO REQUEST (ping) with the IP Record Route o CVE-2001-07537.5Cisco CBOS 2.3.8 and earlier stores the passwords for (1) exec and (2) enable in cleartext in the NVRAM and a configuration file, which coul CVE-2001-07545.0Cisco CBOS 2.3.8 and earlier allows remote attackers to cause a denial of service via a series of large ICMP ECHO REPLY (ping) packets, whic CVE-2001-07557.5Buffer overflow in ftp daemon (ftpd) 6.2 in Debian GNU/Linux allows attackers to cause a denial of service and possibly execute arbitrary co CVE-2001-07567.5CatalogMgr.pl in VirtualCatalog (incorrectly claimed to be in VirtualCart) allows remote attackers to execute arbitrary code via the templat CVE-2001-07577.5Cisco 6400 Access Concentrator Node Route Processor 2 (NRP2) 12.1DC card does not properly disable access when a password has not been set f CVE-2001-07587.5Directory traversal vulnerability in Shambala 4.5 allows remote attackers to escape the FTP root directory via "CWD ..." command.CVE-2001-07597.2Buffer overflow in bctool in Jetico BestCrypt 0.8.1 and earlier allows local users to execute arbitrary code via a file or directory with a CVE-2001-07605.0Citrix Nfuse 1.51 allows remote attackers to obtain the absolute path of the web root via a malformed request to launch.asp that does not pr CVE-2001-07617.5Buffer overflow in HttpSave.dll in Trend Micro InterScan WebManager 1.2 allows remote attackers to execute arbitrary code via a long value t CVE-2001-07624.6Buffer overflow in su-wrapper 1.1.1 allows local users to execute arbitrary code via a long first argument.CVE-2001-07637.5Buffer overflow in Linux xinetd 2.1.8.9pre11-1 and earlier may allow remote attackers to execute arbitrary code via a long ident response, w