PT-1999-1697 · Dns · Dns

Published 1999-12-31 · Updated 2016-10-18 · CVE-1999-1379

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: DNS (affected versions not specified)

Description: The issue allows remote attackers to use DNS name servers as traffic amplifiers. This is achieved via a UDP DNS query with a spoofed source address, resulting in more traffic being sent to the victim than was originally sent by the attacker.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-1999-1379

Affected Products

Dns

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-1999-1379 · Security Note
• http://ciac.llnl.gov/ciac/bulletins/j-063.shtml · Vendor Advisory
• ftp://ftp.auscert.org.au/pub/auscert/advisory/AL-1999.004.dns_dos · Patch
• http://marc.info/?l=bugtraq&m=93433758607623&w=2 · Note
• http://iss.net/security_center/static/7238.php · Note
• http://marc.info/?l=bugtraq&m=93348057829957&w=2 · Note