CVE-1999-0746: Medium severity SUSE SuSE Linux vulnerability
A default configuration of in.identd in SuSE Linux waits 120 seconds between requests, allowing a remote attacker to conduct a denial of service.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Modify the in.identd configuration to reduce the default 120-second wait between requests (or disable the enforced wait) to prevent a remote attacker from causing a denial of service.
in.identd (SUSE Linux) delay between requests (default 120 seconds) = reduce the 120-second wait or disable the enforced wait - Compensating control
Restrict access to the identd service (TCP port 113) at the network perimeter or host firewall to trusted IPs only, or block access from untrusted networks until the in.identd configuration is adjusted.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0746?
CVE-1999-0746 is considered a denial of service vulnerability, allowing for the potential interruption of services.
How do I fix CVE-1999-0746?
To fix CVE-1999-0746, users should update or reconfigure in.identd on their affected SuSE or Slackware Linux systems.
Which versions of software are affected by CVE-1999-0746?
CVE-1999-0746 affects multiple versions of SuSE Linux up to 6.2 and Slackware Linux up to 3.6.
What kind of attack can be executed due to CVE-1999-0746?
CVE-1999-0746 allows remote attackers to execute a denial of service attack by exhausting the in.identd service's request handling.
Is CVE-1999-0746 still relevant today?
While CVE-1999-0746 originally affected older operating systems, it may provide insights into similar configurations and vulnerabilities in modern systems.