PT-1998-1067 · Openbsd+1 · Openbsd+1

Publicado 1998-02-01 · Atualizado 2018-05-03 · CVE-1999-0305

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions OpenBSD versions 2.2 and earlier FreeBSD versions 2.2.5 and earlier

Description The system configuration control facility in BSD-based operating systems does not properly restrict source routed packets, even when the dosourceroute or forwarding variables are set. This allows remote attackers to spoof TCP connections.

Recommendations For OpenBSD versions 2.2 and earlier, update the system configuration to properly restrict source routed packets by adjusting the dosourceroute and forwarding variables. For FreeBSD versions 2.2.5 and earlier, update the system configuration to properly restrict source routed packets by adjusting the dosourceroute and forwarding variables.

Correção

Identificadores relacionados

CVE-1999-0305

Produtos afetados

Freebsd

Openbsd

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-1999-0305 · Nota de Segurança
• http://openbsd.org/advisories/sourceroute.txt · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/736 · Nota
• http://osvdb.org/11502 · Nota