CVE-2000-0916

HIGH · CVSS 7.5 EPSS 5.55%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2000-12-19 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2000-0916

Severity

HIGH

CVSS

7.5

EPSS

5.55%

Original Filing — NVD Description

FreeBSD 4.1.1 and earlier, and possibly other BSD-based OSes, uses an insufficient random number generator to generate initial TCP sequence numbers (ISN), which allows remote attackers to spoof TCP connections.