A race condition between the select() and accept() calls in NetBSD TCP servers allows remote attackers to cause a denial of service.