CVE-1999-0798: Buffer Overflow
Buffer overflow in bootpd on OpenBSD, FreeBSD, and Linux systems via a malformed header type.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
bootpdfrom your environment.Uninstall or remove the bootpd daemon from systems where BOOTP/DHCP services are not required (applicable to OpenBSD, FreeBSD, Linux, BSDI BSD/OS, Red Hat Linux, SCO products, and Xinuos UnixWare).
- Configuration
Disable the bootpd service so it does not start automatically on affected systems (OpenBSD, FreeBSD, Linux, BSDI BSD/OS, Red Hat Linux, SCO Internet FastStart, SCO OpenServer, Xinuos UnixWare) if the service is not required.
bootpd service_enabled = false - Compensating control
Apply network-level controls to block or restrict BOOTP/DHCP traffic (UDP ports 67 and 68) from untrusted networks; isolate systems running bootpd to trusted management networks and enforce ACLs or firewall rules to prevent external access.
- Operational
Immediately stop/terminate any running bootpd instances on affected systems until a patch or vendor fix is available.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0798?
CVE-1999-0798 has a high severity level due to its buffer overflow vulnerability that can allow remote exploitation.
How do I fix CVE-1999-0798?
To fix CVE-1999-0798, update your affected operating system to the latest patched version provided by your vendor.
What systems are impacted by CVE-1999-0798?
CVE-1999-0798 affects OpenBSD, FreeBSD, and various Linux distributions such as Red Hat and SCO systems.
What type of vulnerability is CVE-1999-0798?
CVE-1999-0798 is a buffer overflow vulnerability that occurs through malformed header types in bootpd.
Can CVE-1999-0798 be exploited remotely?
Yes, CVE-1999-0798 can be exploited remotely due to the nature of the buffer overflow in bootpd.