First published: Tue Jan 09 2001(Updated: )
NAI Sniffer Agent allows remote attackers to gain privileges on the agent by sniffing the initial UDP authentication packets and spoofing commands.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Network Associates Sniffer Agent | =3.0.10 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2000-1159 has a high severity level due to its potential to allow remote attackers to gain unauthorized privileges.
To fix CVE-2000-1159, ensure that you update NAI Sniffer Agent to a version that does not use vulnerable UDP authentication mechanisms.
CVE-2000-1159 specifically affects version 3.0.10 of the NAI Sniffer Agent.
With CVE-2000-1159, attackers can perform spoofing attacks and gain elevated privileges by intercepting initial UDP authentication packets.
While CVE-2000-1159 was reported over two decades ago, it is important to assess the use of legacy software and its vulnerabilities in current environments.