CVE-2002-0514

CVE-2002-0514 describes a vulnerability in OpenBSD 3.0's PF firewall. Specifically, the "return-rst" rule inadvertently sets the Time-to-Live (TTL) of RST packets to 128, differing from the default TTL. This allows remote attackers to discern if a port is being filtered, rather than simply closed. The vulnerability has a CVSS score of 5.0, indicating a medium severity. It is easily exploitable over the network with low attack complexity and no authentication required, potentially leading to information disclosure regarding network filtering policies. There is no evidence of active exploitation, nor is exploit code publicly available in Metasploit, Nuclei, or ExploitDB. The CVE has garnered no community discussion or media coverage, suggesting a low level of public attention.