COMMAND

	kernel with Syncookies enabled

SYSTEMS AFFECTED

	Linux 2.2 to 2.4

PROBLEM

	When SYNcookies are enabled AND netfilter blocks specific TCP ports,  if
	an attacker is able to guess the  24  bit  cookie  he  can  bypass  port
	blocking.
	

	

SOLUTION

	Get kernel patch from various vendors.