PT-1998-1175 · Modem · Modem

Published 1998-09-27 · Updated 2017-12-19 · CVE-1999-1228

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Various modems (affected versions not specified)

Description The issue allows remote attackers to execute arbitrary modem commands, such as ATH and ATH0, by including a +++ sequence in various types of packets or messages, including ICMP packets, e-mail messages, and IRC commands. This is possible when modems do not implement a guard time or are configured with a guard time of 0.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-1999-1228

Affected Products

Modem

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-1999-1228 · Security Note
• http://macintouch.com/modemsecurity.html · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/3320 · Note
• http://marc.info/?l=bugtraq&m=90695973308453&w=2 · Note