CVE-1999-0426: Critical severity SUSE SuSE Linux vulnerability
The default permissions of /dev/kmem in Linux versions before 2.0.36 allows IP spoofing.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
SUSE Linuxto a version that resolves this vulnerability.Fixed in 2.0.36 - Configuration
Restrict access to /dev/kmem so that only root can read or write it (e.g., set ownership to root and remove access for other users).
/dev/kmem permissions = restrict to root-only
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0426?
CVE-1999-0426 is considered a high severity vulnerability due to its potential to allow IP spoofing.
How do I fix CVE-1999-0426?
To fix CVE-1999-0426, update your Linux system to version 2.0.36 or later.
Which software is affected by CVE-1999-0426?
CVE-1999-0426 affects SUSE Linux version 6.0.
What type of attack does CVE-1999-0426 facilitate?
CVE-1999-0426 facilitates IP spoofing, allowing an attacker to impersonate another IP address.
Is there a workaround for CVE-1999-0426?
A potential workaround for CVE-1999-0426 includes modifying the permissions of /dev/kmem appropriately.