CVE-2000-0463: Medium severity Be BeOS vulnerability
BeOS 5.0 allows remote attackers to cause a denial of service via fragmented TCP packets.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
At the network perimeter (firewall, router, or IDS/IPS), drop or aggressively reassemble and inspect fragmented TCP packets destined for BeOS 5.0 hosts to prevent exploitation via crafted fragmented TCP traffic.
- Compensating control
Restrict network exposure of BeOS 5.0 systems: limit inbound access to trusted management IPs, place affected hosts behind a filtered network segment, or isolate them from untrusted networks until a vendor fix is available.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0463?
CVE-2000-0463 is considered a critical vulnerability as it allows for a denial of service attack.
How do I fix CVE-2000-0463?
To mitigate CVE-2000-0463, users should upgrade to a more recent version of BeOS that addresses this vulnerability.
Who is affected by CVE-2000-0463?
CVE-2000-0463 affects users running BeOS version 5.0.
What type of attack does CVE-2000-0463 exploit?
CVE-2000-0463 exploits fragmented TCP packets to perform a denial of service attack.
What are the consequences of CVE-2000-0463?
The main consequence of CVE-2000-0463 is a potential service outage for systems running the affected BeOS version.