TCP/IP vulnerabilities: SYN flooding (exhausts connection state), TCP session hijacking (sequence number prediction), IP spoofing (fake source addresses), ACK injection.
TCP sequence numbers are now randomized (prevents easy hijacking). SYN cookies prevent SYN flooding without maintaining state. IPSec at the network layer protects against IP spoofing. TLS at the application layer protects against TCP session hijacking.