PT-1998-1238 · Network Flight Recorder · Network Flight Recorder

Publicado 1998-04-08 · Atualizado 2008-09-05 · CVE-1999-1503

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Network Flight Recorder (NFR) versions 1.5 through 1.6

Description The issue allows remote attackers to cause a denial of service, resulting in the crash of the nfrd service. This can be achieved by sending a TCP packet with a null header and data field.

Recommendations For versions 1.5 and 1.6, consider implementing packet validation to prevent null headers and data fields from being processed by the nfrd service. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-1999-1503

Produtos afetados

Network Flight Recorder

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-1999-1503 · Nota de Segurança
• http://securityfocus.com/bid/63 · Aviso do Fabricante