medium5.0Public exploit code

CVE-1999-0513

ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Linux Kernel 2.0/2.1 (Digital UNIX 4.0 D / FreeBSD 2.2.4 / HP HP-UX 10.20/11.0 / IBM AIX 3.2.5 / NetBSD 1.2 / Solaris 2.5.1) - Smurf Denial of Service1998-01-05 · dos · bsd · Verified

Impact

ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service.

Affected products

Vendor	Product	Affected versions
Digital	Unix	Versions 3.2g, 4.0, 4.0a, 4.0b, 4.0c, 4.0d
Freebsd	Freebsd	Versions 1.1.5.1, 2.0.5, 2.1.0, 2.1.5, 2.1.6, 2.1.7.1
Hp	Hp-Ux	Versions 10.20, 11.00
Ibm	Aix	Versions 3.1, 3.2, 3.2.4, 3.2.5
Linux	Linux Kernel	Versions 2.0, 2.1
Netbsd	Netbsd	Version 1.2
Sun	Solaris	Versions 2.4, 2.5, 2.5.1, 2.6
Sun	Sunos	All versions Versions 5.4, 5.5, 5.5.1

References