CVE-1999-0796: High severity FreeBSD FreeBSD vulnerability
FreeBSD T/TCP Extensions for Transactions can be subjected to spoofing attacks.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable the T/TCP (Transactional TCP) extensions on affected FreeBSD systems or rebuild the kernel without T/TCP support to remove the vulnerable functionality.
FreeBSD Kernel (T/TCP extensions) T/TCP extensions = disabled - Compensating control
At the network perimeter, block or restrict T/TCP/transactional TCP traffic and restrict access to affected hosts to trusted IPs to reduce exposure to spoofing attacks.
- Operational
Monitor network and host logs for anomalous TCP transaction activity, enable IDS/IPS signatures for TCP spoofing where available, and apply vendor security advisories and patches as soon as fixes for this issue are released.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0796?
CVE-1999-0796 is classified as a moderate severity vulnerability due to its potential for spoofing attacks.
How do I fix CVE-1999-0796?
To mitigate CVE-1999-0796, it is recommended to update FreeBSD to the latest version or apply relevant patches.
What are the affected versions in CVE-1999-0796?
CVE-1999-0796 affects FreeBSD versions 2.1.0 and 2.2.
What type of attacks can exploit CVE-1999-0796?
CVE-1999-0796 can be exploited through spoofing attacks that may compromise network transactions.
Is CVE-1999-0796 still relevant today?
Although CVE-1999-0796 originates from 1999, its relevance may remain for legacy systems still running affected FreeBSD versions.