PT-2001-1104 · Linux+1 · Linux+1

Publicado 2001-03-12 · Atualizado 2016-10-18 · CVE-2000-0314

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions NetBSD version 1.3.3 Linux systems (affected versions not specified)

Description The issue allows local users to flood other systems by exploiting the traceroute command. This is achieved by providing a large waittime option, which is not properly parsed and results in setting the time delay for sending packets to zero.

Recommendations For NetBSD version 1.3.3, avoid using the -w option with large values in the traceroute command until a fix is available. For Linux systems, restrict the use of the traceroute command with the -w option to prevent flooding attacks, and consider implementing rate limiting on outgoing packets.

Correção

Identificadores relacionados

CVE-2000-0314

Produtos afetados

Linux

Netbsd

Referências · 4

• http://osvdb.org/7574 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2000-0314 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=91893782027835&w=2 · Nota
• ftp://ftp.netbsd.org/pub/NetBSD/misc/security/advisories/NetBSD-SA1999-004.txt.asc · Aviso do Fabricante