Lucene search

[email protected]CVE-2000-0314

HistoryMar 12, 2001 - 5:00 a.m.

CVE-2000-0314

2001-03-1205:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2000-0314

netbsd 1.3.3

linux

traceroute

local users

flood

waittime option

packet delay

nvd

7.1 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.003 Low

EPSS

Percentile

65.3%

JSON

traceroute in NetBSD 1.3.3 and Linux systems allows local users to flood other systems by providing traceroute with a large waittime (-w) option, which is not parsed properly and sets the time delay for sending packets to zero.

CPENameOperatorVersion
netbsd:netbsdnetbsdle1.3.3
slackware:slackware_linuxslackware slackware linuxeq2.0.34
digital:unixdigital unixeq4.0
debian:debian_linuxdebian debian linuxeq2.0.34
redhat:linuxredhat linuxeq2.0.34

CPE	Name	Operator	Version
netbsd:netbsd	netbsd	le	1.3.3
slackware:slackware_linux	slackware slackware linux	eq	2.0.34
digital:unix	digital unix	eq	4.0
debian:debian_linux	debian debian linux	eq	2.0.34
redhat:linux	redhat linux	eq	2.0.34

References

ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA1999-004.txt.asc

marc.info/?l=bugtraq&m=91893782027835&w=2

www.osvdb.org/7574

Social References

7.1 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.003 Low

EPSS

Percentile

65.3%

JSON