CVE-2002-0381

The TCP implementation in various BSD operating systems (tcp_input.c) does not properly block connections to broadcast addresses, which could allow remote attackers to bypass intended filters via packets with a unicast link layer address and an IP broadcast address.

• ftp://patches.sgi.com/support/free/security/advisories/20030604-01-I
• http://cvsweb.netbsd.org/bsdweb.cgi/syssrc/sys/netinet/tcp_input.c.diff?r1=1.136&r2=1.137
• http://online.securityfocus.com/archive/1/262733Exploit, Patch, Vendor Advisory
• http://www.FreeBSD.org/cgi/query-pr.cgi?pr=35022Patch, Vendor Advisory
• http://www.iss.net/security_center/static/8485.php
• http://www.openbsd.org/cgi-bin/cvsweb/src/sys/netinet/tcp_input.c.diff?r1=1.109&r2=1.110
• http://www.osvdb.org/5308
• http://www.securityfocus.com/bid/4309
• ftp://patches.sgi.com/support/free/security/advisories/20030604-01-I
• http://cvsweb.netbsd.org/bsdweb.cgi/syssrc/sys/netinet/tcp_input.c.diff?r1=1.136&r2=1.137
• http://online.securityfocus.com/archive/1/262733Exploit, Patch, Vendor Advisory
• http://www.FreeBSD.org/cgi/query-pr.cgi?pr=35022Patch, Vendor Advisory
• http://www.iss.net/security_center/static/8485.php
• http://www.openbsd.org/cgi-bin/cvsweb/src/sys/netinet/tcp_input.c.diff?r1=1.109&r2=1.110
• http://www.osvdb.org/5308
• http://www.securityfocus.com/bid/4309

Published

Jun 25, 2002

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2002-0375Cross-site scripting vulnerability in sgdynamo.exe for Sgdyn…
• CVE-2002-0376Buffer overflow in Apple QuickTime 5.0 ActiveX component all…
• CVE-2002-0377Gaim 0.57 stores sensitive information in world-readable and…
• CVE-2002-0378The default configuration of LPRng print spooler in Red Hat …
• CVE-2002-0379Buffer overflow in University of Washington imap server (uw-…
• CVE-2002-0380Buffer overflow in tcpdump 3.6.2 and earlier allows remote a…
• CVE-2002-0382XChat IRC client allows remote attackers to execute arbitrar…
• CVE-2002-0384Buffer overflow in Jabber plug-in for Gaim client before 0.5…
• CVE-2002-0385Vignette Story Server 4.1 and 6.0 allows remote attackers to…
• CVE-2002-0386The administration module for Oracle Web Cache in Oracle9iAS…
• CVE-2002-0387Buffer overflow in gxnsapi6.dll NSAPI plugin of the Connecto…
• CVE-2002-0388Cross-site scripting vulnerabilities in Mailman before 2.0.1…