First published: Thu Nov 05 1998(Updated: )
NukeNabber allows remote attackers to cause a denial of service by connecting to the NukeNabber port (1080) without sending any data, which causes the CPU usage to rise to 100% from the report.exe program that is executed upon the connection.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Puppet |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-1999-1284 describes a denial of service vulnerability in NukeNabber that is triggered by connecting to port 1080 without sending any data.
Exploiting CVE-1999-1284 can lead to a complete denial of service, causing the CPU usage to spike to 100%.
To mitigate CVE-1999-1284, it is recommended to block access to port 1080 or to use firewall rules that prevent unauthorized connections.
CVE-1999-1284 specifically affects the NukeNabber software provided by Puppet's Place.
There is no specific patch mentioned for CVE-1999-1284, so the best approach is to implement network controls to restrict access.