CVE-1999-0513

Description

ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service.

Affected products

• digital / unix3.2g – 3.2g
• digital / unix4.0 – 4.0
• digital / unix4.0a – 4.0a
• digital / unix4.0b – 4.0b
• digital / unix4.0c – 4.0c
• digital / unix4.0d – 4.0d
• FreeBSD / FreeBSD1.1.5.1 – 1.1.5.1
• FreeBSD / FreeBSD2.0.5 – 2.0.5
• FreeBSD / FreeBSD2.1.0 – 2.1.0
• FreeBSD / FreeBSD2.1.5 – 2.1.5
• FreeBSD / FreeBSD2.1.6 – 2.1.6
• FreeBSD / FreeBSD2.1.7.1 – 2.1.7.1
• FreeBSD / FreeBSD2.2.2 – 2.2.2
• FreeBSD / FreeBSD2.2.3 – 2.2.3
• FreeBSD / FreeBSD2.2.4 – 2.2.4
• HP / hp-ux10.20 – 10.20
• HP / hp-ux11.00 – 11.00
• ibm / aix3.1 – 3.1
• ibm / aix3.2 – 3.2
• ibm / aix3.2.4 – 3.2.4
• ibm / aix3.2.5 – 3.2.5
• Linux / Linux kernel2.0 – 2.0
• Linux / Linux kernel2.1 – 2.1
• NetBSD / netbsd1.2 – 1.2
• sun / solaris2.4 – 2.4
• sun / solaris2.5 – 2.5
• sun / solaris2.5.1 – 2.5.1
• sun / solaris2.5.1 – 2.5.1
• sun / solaris2.6 – 2.6
• sun / sunos
• sun / sunos5.4 – 5.4
• sun / sunos5.5 – 5.5
• sun / sunos5.5.1 – 5.5.1

Exploits & proofs of concept

• exploit-dbLinux Kernel 2.0/2.1 (Digital UNIX 4.0 D / FreeBSD 2.2.4 / HP HP-UX 10.20/11.0 / IBM AIX 3.2.5 / NetBSD 1.2 / Solaris 2.5.1) - Smurf Denial of Serviceby T. Freak

References

• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0513