CVE-1999-0217: Medium severity Sun Sunos vulnerability
Malicious option settings in UDP packets could force a reboot in SunOS 4.1.3 systems.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable or stop unnecessary UDP services and close any unneeded UDP ports on SunOS 4.1.3 systems to reduce exposure to malicious UDP option packets.
SunOS (UDP services) UDP services/ports = disabled for unneeded services - Compensating control
On perimeter and host firewalls, block or drop suspicious UDP traffic and restrict incoming UDP to the affected SunOS hosts to only trusted sources (apply ACLs/filters to reject or drop malformed UDP packets and limit UDP reachability).
- Operational
Monitor SunOS hosts and network flows for unexpected reboots and anomalous UDP packets; if exploitation is suspected, isolate affected hosts, preserve logs/evidence, and perform forensic analysis.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0217?
CVE-1999-0217 has a moderate severity as it can cause a system reboot in affected SunOS versions.
How do I fix CVE-1999-0217?
To fix CVE-1999-0217, ensure you update your SunOS to a version that is not vulnerable to this exploit.
Which versions of SunOS are affected by CVE-1999-0217?
CVE-1999-0217 affects SunOS versions 4.0.3, 4.1, and several other minor releases.
What impact does CVE-1999-0217 have on systems?
CVE-1999-0217 allows malicious UDP packets to force a reboot, impacting system availability.
Is there any workaround for CVE-1999-0217 if I cannot apply a patch?
A temporary workaround for CVE-1999-0217 is to block UDP traffic at the firewall to prevent exploitation.