CVE-1999-0305

The system configuration control (sysctl) facility in BSD based operating systems OpenBSD 2.2 and earlier, and FreeBSD 2.2.5 and earlier, does not properly restrict source routed packets even when the (1) dosourceroute or (2) forwarding variables are set, which allows remote attackers to spoof TCP connections.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://www.openbsd.org/advisories/sourceroute.txt
http://www.osvdb.org/11502
https://exchange.xforce.ibmcloud.com/vulnerabilities/736
http://www.openbsd.org/advisories/sourceroute.txt
http://www.osvdb.org/11502
https://exchange.xforce.ibmcloud.com/vulnerabilities/736

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:bsdi:bsd_os::::::::
	cpe:2.3:o:freebsd:freebsd:2.2:::::::*
	cpe:2.3:o:freebsd:freebsd:2.2.5:::::::*
	cpe:2.3:o:openbsd:openbsd:2.0:::::::*
	cpe:2.3:o:openbsd:openbsd:2.1:::::::*
	cpe:2.3:o:openbsd:openbsd:2.2:::::::*

History

20 Nov 2024, 23:28

Type	Values Removed	Values Added
References	~~() http://www.openbsd.org/advisories/sourceroute.txt -~~	() http://www.openbsd.org/advisories/sourceroute.txt -
References	~~() http://www.osvdb.org/11502 -~~	() http://www.osvdb.org/11502 -
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/736 -~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/736 -

Information

Published : 1998-02-01 05:00

Updated : 2024-11-20 23:28

NVD link : CVE-1999-0305

Mitre link : CVE-1999-0305

CVE.ORG link : CVE-1999-0305

JSON object : View

Products Affected

openbsd

openbsd

freebsd

freebsd

bsdi

bsd_os

CWE

NVD-CWE-Other

{"id": "CVE-1999-0305", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "1998-02-01T05:00:00.000", "references": [{"url": "http://www.openbsd.org/advisories/sourceroute.txt", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/11502", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/736", "source": "cve@mitre.org"}, {"url": "http://www.openbsd.org/advisories/sourceroute.txt", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.osvdb.org/11502", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/736", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "The system configuration control (sysctl) facility in BSD based operating systems OpenBSD 2.2 and earlier, and FreeBSD 2.2.5 and earlier, does not properly restrict source routed packets even when the (1) dosourceroute or (2) forwarding variables are set, which allows remote attackers to spoof TCP connections."}], "lastModified": "2024-11-20T23:28:22.720", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:bsdi:bsd_os:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CA7932DF-A035-4506-9BF1-C733DC5DD872"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "183667CA-6DF1-4BFB-AE32-9ABF55B7283A"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:2.2.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "314BA420-4C74-4060-8ACE-D7A7C041CF2B"}, {"criteria": "cpe:2.3:o:openbsd:openbsd:2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "36DF0D51-FCFA-46A3-B834-E80DFA91DFDC"}, {"criteria": "cpe:2.3:o:openbsd:openbsd:2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5CB726CF-ADA2-4CDA-9786-1E84AC53740A"}, {"criteria": "cpe:2.3:o:openbsd:openbsd:2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1FC373FC-88AC-4B6D-A289-51881ACD57F7"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}