CVE-1999-1533: High severity Trend Micro InterScan VirusWall vulnerability
Eicon Technology Diva LAN ISDN modem allows a remote attacker to cause a denial of service (hang) via a long password argument to the login.htm file in its HTTP service.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable the modem's HTTP/web management interface if the device supports it. If it cannot be fully disabled, configure the device to restrict or remove external access to login.htm (e.g., bind the service to a management-only interface or otherwise prevent unauthenticated HTTP requests).
Eicon Technology Diva LAN ISDN modem HTTP service (login.htm) = disabled or restricted - Compensating control
Restrict network access to the modem's HTTP interface (login.htm) using firewall rules or ACLs: allow only trusted management IPs or place the device on a restricted management network. Block HTTP(S) access from untrusted networks to prevent remote exploitation.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1533?
CVE-1999-1533 is classified as a denial of service vulnerability.
How can CVE-1999-1533 be exploited?
CVE-1999-1533 can be exploited by sending a long password argument to the login.htm file in the HTTP service.
Which software versions are affected by CVE-1999-1533?
CVE-1999-1533 affects Trend Micro InterScan VirusWall versions 3.2.3 and 3.3.
What is the impact of CVE-1999-1533 on affected systems?
The impact of CVE-1999-1533 is that it may cause the system to hang, leading to a denial of service.
How do I mitigate CVE-1999-1533?
Mitigation for CVE-1999-1533 involves implementing input validation to restrict password lengths and updating to non-vulnerable software versions.