CVE-1999-0305: Medium severity FreeBSD FreeBSD vulnerability
The system configuration control (sysctl) facility in BSD based operating systems OpenBSD 2.2 and earlier, and FreeBSD 2.2.5 and earlier, does not properly restrict source routed packets even when the (1) dosourceroute or (2) forwarding variables are set, which allows remote attackers to spoof TCP connections.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable source routing by setting the sysctl variable 'dosourceroute' to 0 on affected BSD systems (OpenBSD, FreeBSD, BSDI).
BSD sysctl facility dosourceroute = 0 - Configuration
Disable IP forwarding by setting the sysctl variable 'forwarding' to 0 on affected BSD systems (OpenBSD, FreeBSD, BSDI).
BSD sysctl facility forwarding = 0 - Compensating control
Block or drop source-routed packets at network perimeter devices (firewalls/routers) to prevent spoofed TCP connections until systems are patched or vendor fixes are available.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0305?
CVE-1999-0305 has a high severity rating due to its potential for allowing remote attackers to spoof TCP connections.
How do I fix CVE-1999-0305?
To fix CVE-1999-0305, ensure that source routing is disabled in your system configuration.
Which systems are affected by CVE-1999-0305?
CVE-1999-0305 affects OpenBSD versions 2.0-2.2 and FreeBSD versions 2.2-2.2.5.
Can CVE-1999-0305 be exploited remotely?
Yes, CVE-1999-0305 can be exploited remotely due to improper restrictions on source routed packets.
What type of attack does CVE-1999-0305 facilitate?
CVE-1999-0305 facilitates TCP spoofing attacks, allowing attackers to intercept or manipulate network traffic.