PT-1999-1891 · Openbsd+2 · Openbsd+2

Published 1999-09-05 · Updated 2017-10-10 · CVE-2000-0489

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions FreeBSD (affected versions not specified) NetBSD (affected versions not specified) OpenBSD (affected versions not specified)

Description The issue allows an attacker to cause a denial of service by creating a large number of socket pairs using the socketpair function, setting a large buffer size via setsockopt, then writing large buffers.

Recommendations For FreeBSD, consider restricting the use of the socketpair function until a patch is available. For NetBSD, restrict access to the setsockopt function to minimize the risk of exploitation. For OpenBSD, avoid using large buffer sizes via setsockopt in the affected socket pairs until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2000-0489

Affected Products

Freebsd

Netbsd

Openbsd

References · 6

• 🔥 https://exploit-db.com/exploits/19488 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-0489 · Security Note
• http://securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.9908270039010.16315-100000%40thetis.deor.org · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/3298 · Note
• http://securityfocus.com/bid/622 · Note
• http://securityfocus.com/templates/archive.pike?list=1&msg=NCBBKFKDOLAGKIAPMILPCEJLCEAA.labs%40ussrback.com · Note