CVE-2001-0026: Medium severity Roaring Penguin pppoe vulnerability
Published Feb 12, 2001
·Updated
rp-pppoe PPPoE client allows remote attackers to cause a denial of service via the Clamp MSS option and a TCP packet with a zero-length TCP option.
Affected Software
5 affected components
Roaring Penguin pppoe=2.4
Roaring Penguin pppoe=2.3
Roaring Penguin pppoe=2.1
Roaring Penguin pppoe=2.2
Roaring Penguin pppoe=2.0
Remediation
Patch Available
Patch Available
Event History
Feb 12, 2001
CVE Published
05:00 AM
May 7, 2001
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2001-0026?
CVE-2001-0026 is classified as a high severity vulnerability due to its potential to cause denial of service.
2
How do I fix CVE-2001-0026?
To fix CVE-2001-0026, you should upgrade to a patched version of the Roaring Penguin PPPoE client.
3
How does CVE-2001-0026 affect my system?
CVE-2001-0026 allows remote attackers to disrupt network service by exploiting the PPPoE client's handling of TCP packets.
4
What versions of Roaring Penguin PPPoE are affected by CVE-2001-0026?
CVE-2001-0026 affects versions 2.0 through 2.4 of the Roaring Penguin PPPoE client.
5
Is CVE-2001-0026 an exploit that impacts all networks?
CVE-2001-0026 can impact any network utilizing vulnerable versions of the Roaring Penguin PPPoE client.