Syncookies are used to protect a system against certain Denial Of Service(DOS) attacks. A flaw in this mechanism has been found which can be used to circumvent certain types of firewall configurations. Read about it at http://www.redhat.com/support/errata/RHSA-2001-142.html
[]