Lucene search

[email protected]CVE-2000-0314

HistoryMay 07, 2001 - 4:00 a.m.

CVE-2000-0314

2001-05-0704:00:00

[email protected]

web.nvd.nist.gov

cve-2000-0314

netbsd 1.3.3

linux

traceroute

local users

flood

waittime option

packet delay

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.7 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

65.6%

JSON

traceroute in NetBSD 1.3.3 and Linux systems allows local users to flood other systems by providing traceroute with a large waittime (-w) option, which is not parsed properly and sets the time delay for sending packets to zero.

Affected configurations

NVD

Node

debiandebian_linuxMatch2.0.34

digitalunixMatch4.0

netbsdnetbsdRange≤1.3.3

redhatlinuxMatch2.0.34

slackwareslackware_linuxMatch2.0.34

CPENameOperatorVersion
debian:debian_linuxdebian debian linuxeq2.0.34
digital:unixdigital unixeq4.0
netbsd:netbsdnetbsdle1.3.3
redhat:linuxredhat linuxeq2.0.34
slackware:slackware_linuxslackware slackware linuxeq2.0.34

CPE	Name	Operator	Version
debian:debian_linux	debian debian linux	eq	2.0.34
digital:unix	digital unix	eq	4.0
netbsd:netbsd	netbsd	le	1.3.3
redhat:linux	redhat linux	eq	2.0.34
slackware:slackware_linux	slackware slackware linux	eq	2.0.34

References

ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA1999-004.txt.asc

marc.info/?l=bugtraq&m=91893782027835&w=2

www.osvdb.org/7574

Social References

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.7 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

65.6%

JSON

Related for CVE-2000-0314

nvd1 cvelist1