CVEvulnerability

CVE-1999-0513

5.0 MEDIUM Published 1998-01-05 Modified 2026-06-16 Official page ↗
Status
Modified
Published
1998-01-05
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P

Description

ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service.

Affected configurations

• digital unix 3.2g • digital unix 4.0 • digital unix 4.0a • digital unix 4.0b • digital unix 4.0c • digital unix 4.0d • freebsd freebsd 1.1.5.1 • freebsd freebsd 2.0.5 • freebsd freebsd 2.1.0 • freebsd freebsd 2.1.5 • freebsd freebsd 2.1.6 • freebsd freebsd 2.1.7.1 • freebsd freebsd 2.2.2 • freebsd freebsd 2.2.3 • freebsd freebsd 2.2.4 • hp hp-ux 10.20 • hp hp-ux 11.00 • ibm aix 3.1 • ibm aix 3.2 • ibm aix 3.2.4 • ibm aix 3.2.5 • linux linux kernel 2.0 • linux linux kernel 2.1 • netbsd netbsd 1.2 • sun solaris 2.4 • sun solaris 2.5 • sun solaris 2.5.1 • sun solaris 2.6 • sun sunos • sun sunos 5.4 • sun sunos 5.5 • sun sunos 5.5.1

Related

Referenced by CWE · observed example (3)

  • CWE-405 Asymmetric Resource Consumption (Amplification) weakness
  • CWE-406 Insufficient Control of Network Message Volume (Network Amplification) weakness
  • CWE-941 Incorrectly Specified Destination in a Communication Channel weakness

References