CVE-2004-0257: Medium severity NetBSD NetBSD vulnerability

Published Sep 1, 2004

Updated

OpenBSD 3.4 and NetBSD 1.6 and 1.6.1 allow remote attackers to cause a denial of service (crash) by sending an IPv6 packet with a small MTU to a listening port and then issuing a TCP connect to that port.

Affected Software

7 affected components

NetBSD NetBSD=1.6

NetBSD NetBSD=1.6.1

OpenBSD OpenBSD=3.0

OpenBSD OpenBSD=3.1

OpenBSD OpenBSD=3.2

OpenBSD OpenBSD=3.3

OpenBSD OpenBSD=3.4

Remediation

Patch Available

http://www.securityfocus.com/bid/9577

Event History

Sep 1, 2004

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2004-0257?

CVE-2004-0257 has a severity rating that indicates it can cause a denial of service affecting OpenBSD 3.4 and NetBSD 1.6 and 1.6.1.

How do I fix CVE-2004-0257?

To fix CVE-2004-0257, upgrade to a patched version of OpenBSD or NetBSD that addresses this vulnerability.

What are the affected systems by CVE-2004-0257?

CVE-2004-0257 affects OpenBSD versions 3.0 to 3.4 and NetBSD versions 1.6 and 1.6.1.

What type of attack is described by CVE-2004-0257?

CVE-2004-0257 describes a remote denial of service attack that causes the system to crash when processing specific IPv6 packets.

What should I do if my system is vulnerable to CVE-2004-0257?

If your system is vulnerable to CVE-2004-0257, apply patches or updates immediately to mitigate the denial of service risk.