CVE-1999-0513: Medium severity Sun Solaris vulnerability
ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Configure the system network/ICMP settings to disable responding to ICMP echo requests sent to broadcast or multicast addresses (prevent ICMP broadcast responses).
Digital OpenVMS ICMP_broadcast_response = disabled - Configuration
Configure kernel/network settings to disable responding to ICMP echo requests sent to broadcast or multicast addresses (prevent ICMP broadcast responses).
FreeBSD Kernel ICMP_broadcast_response = disabled - Configuration
Configure network/ICMP settings to disable responding to ICMP echo requests sent to broadcast or multicast addresses (prevent ICMP broadcast responses).
HPE HP-UX ICMP_broadcast_response = disabled - Configuration
Configure kernel networking parameters to disable responding to ICMP echo requests sent to broadcast or multicast addresses (prevent ICMP broadcast responses).
Linux Kernel ICMP_broadcast_response = disabled - Compensating control
At network perimeter devices (routers/firewalls), block or drop ICMP echo requests addressed to broadcast or multicast addresses and disable IP-directed-broadcasts; implement ACLs to prevent ICMP-based amplification from reaching internal hosts.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0513?
CVE-1999-0513 is classified as a denial of service vulnerability.
How do I fix CVE-1999-0513?
To fix CVE-1999-0513, you should restrict ICMP messages to broadcast addresses in your network configuration.
Which systems are affected by CVE-1999-0513?
CVE-1999-0513 affects various versions of Digital UNIX, FreeBSD, HP-UX, AIX, Linux Kernel, NetBSD, Solaris, and SunOS.
What type of attack does CVE-1999-0513 allow?
CVE-1999-0513 allows for Smurf attacks that can overwhelm a system with ICMP echo requests.
Is CVE-1999-0513 still relevant today?
While CVE-1999-0513 is an older vulnerability, it remains relevant for unpatched systems and those with misconfigured network settings.