One of the more fascinating security holes was described by Robert Morris. This form of attack takes advantage of the predictability of sequence numbers used in TCP implementations. In particular BSD 4.2 and 4.3 (and their many siblings) have been shown to be vulnerable.