CVEvulnerability
CVE-1999-1339
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 1999-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Description
Vulnerability when Network Address Translation (NAT) is enabled in Linux 2.2.10 and earlier with ipchains, or FreeBSD 3.2 with ipfw, allows remote attackers to cause a denial of service (kernel panic) via a ping -R (record route) command.
Affected configurations
• freebsd freebsd 3.2
• linux linux kernel (<= 2.2.10)
References
- http://marc.info/?l=bugtraq&m=93277426802802&w=2 marc.info
- http://marc.info/?l=bugtraq&m=93277766505061&w=2 marc.info
- http://www.iss.net/security_center/static/7257.php www.iss.net
- http://www.kernel.org/pub/linux/kernel/v2.2/patch-2.2.11.gz www.kernel.org
- http://www.osvdb.org/6105 www.osvdb.org
- http://marc.info/?l=bugtraq&m=93277426802802&w=2 marc.info
- http://marc.info/?l=bugtraq&m=93277766505061&w=2 marc.info
- http://www.iss.net/security_center/static/7257.php www.iss.net
- http://www.kernel.org/pub/linux/kernel/v2.2/patch-2.2.11.gz www.kernel.org
- http://www.osvdb.org/6105 www.osvdb.org