CVE-1999-0305
First published: Sun Feb 01 1998(Updated: )
The system configuration control (sysctl) facility in BSD based operating systems OpenBSD 2.2 and earlier, and FreeBSD 2.2.5 and earlier, does not properly restrict source routed packets even when the (1) dosourceroute or (2) forwarding variables are set, which allows remote attackers to spoof TCP connections.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| FreeBSD Kernel | =2.2.5 | |
| OpenBSD | =2.1 | |
| OpenBSD | =2.2 | |
| OpenBSD | =2.0 | |
| FreeBSD Kernel | =2.2 | |
| BSDI BSD/OS | ||
| =2.2 | ||
| =2.2.5 | ||
| =2.0 | ||
| =2.1 | ||
| =2.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-1999-0305?
CVE-1999-0305 has a high severity rating due to its potential for allowing remote attackers to spoof TCP connections.
How do I fix CVE-1999-0305?
To fix CVE-1999-0305, ensure that source routing is disabled in your system configuration.
Which systems are affected by CVE-1999-0305?
CVE-1999-0305 affects OpenBSD versions 2.0-2.2 and FreeBSD versions 2.2-2.2.5.
Can CVE-1999-0305 be exploited remotely?
Yes, CVE-1999-0305 can be exploited remotely due to improper restrictions on source routed packets.
What type of attack does CVE-1999-0305 facilitate?
CVE-1999-0305 facilitates TCP spoofing attacks, allowing attackers to intercept or manipulate network traffic.
- agent/type
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/references
- agent/severity
- agent/description
- agent/last-modified-date
- agent/author
- agent/event
- agent/source
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- vendor/freebsd
- canonical/freebsd kernel
- version/freebsd kernel/2.2.5
- vendor/openbsd
- canonical/openbsd
- version/openbsd/2.1
- version/openbsd/2.2
- version/openbsd/2.0
- version/freebsd kernel/2.2
- vendor/bsdi
- canonical/bsdi bsd/os