CVE-2007-2782 Packeteer PacketShaper uses fixed increments in TCP initial sequence number (ISN) values, which allows remote attackers to predict the ISN value, and perform session hijacking or disruption.
HighCVSS 7.5
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Packeteer PacketShaper uses fixed increments in TCP initial sequence number (ISN) values, which allows remote attackers to predict the ISN value, and perform session hijacking or disruption.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| packeteer packetshaper | = 7.3.0g2 | No fix listed |
| packeteer packetshaper | = 7.5.0g1 | No fix listed |
References
- 36226 vdb-entry
- 25344 third-party-advisory
- 2726 third-party-advisory
- 20070518 Predictable TCP ISN in Packeteer PacketShaper mailing-list
- 24048 vdb-entry
- ADV-2007-1891 vdb-entry