CVE-1999-0290: Medium severity Qbik WinGate vulnerability
The WinGate telnet proxy allows remote attackers to cause a denial of service via a large number of connections to localhost.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable the WinGate telnet proxy if it is not required to prevent remote attackers from causing a denial of service via many connections to localhost.
Qbik WinGate (telnet proxy) telnet_proxy_enabled = false - Configuration
Configure the telnet proxy to limit the number of simultaneous connections to localhost to prevent resource exhaustion from a large number of connections.
Qbik WinGate (telnet proxy) maximum_simultaneous_connections = limit/reduce - Compensating control
Restrict access to the WinGate telnet proxy to trusted IP addresses via firewall rules or network ACLs to prevent remote attackers from establishing large numbers of connections.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0290?
CVE-1999-0290 is classified as a denial of service vulnerability.
How do I fix CVE-1999-0290?
To fix CVE-1999-0290, limit the number of connections to localhost or update to the latest version of WinGate.
What software is affected by CVE-1999-0290?
CVE-1999-0290 affects all versions of Qbik WinGate that allow telnet proxy connections.
Can CVE-1999-0290 be exploited remotely?
Yes, CVE-1999-0290 can be exploited remotely by initiating a large number of connections to the telnet proxy.
What impact does CVE-1999-0290 have on systems?
The impact of CVE-1999-0290 is primarily a denial of service, which can render the telnet proxy unavailable.