CVE-2000-0315

traceroute in NetBSD 1.3.3 and Linux systems allows local unprivileged users to modify the source address of the packets, which could be used in spoofing attacks.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA1999-004.txt.asc	Patch Vendor Advisory
http://marc.info/?l=bugtraq&m=91893782027835&w=2
http://www.osvdb.org/7575
ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA1999-004.txt.asc	Patch Vendor Advisory
http://marc.info/?l=bugtraq&m=91893782027835&w=2
http://www.osvdb.org/7575

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:debian:debian_linux:2.0.34:::::::*
	cpe:2.3:o:digital:unix:4.0:::::::*
	cpe:2.3:o:netbsd:netbsd::::::::
	cpe:2.3:o:redhat:linux:2.0.34:::::::*
	cpe:2.3:o:slackware:slackware_linux:2.0.34:::::::*

History

20 Nov 2024, 23:32

Type	Values Removed	Values Added
References	~~() ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA1999-004.txt.asc - Patch, Vendor Advisory~~	() ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA1999-004.txt.asc - Patch, Vendor Advisory
References	~~() http://marc.info/?l=bugtraq&m=91893782027835&w=2 -~~	() http://marc.info/?l=bugtraq&m=91893782027835&w=2 -
References	~~() http://www.osvdb.org/7575 -~~	() http://www.osvdb.org/7575 -

Information

Published : 2001-03-12 05:00

Updated : 2024-11-20 23:32

NVD link : CVE-2000-0315

Mitre link : CVE-2000-0315

CVE.ORG link : CVE-2000-0315

JSON object : View

Products Affected

redhat

linux

digital

unix

debian

debian_linux

netbsd

netbsd

slackware

slackware_linux

CWE

NVD-CWE-Other

{"id": "CVE-2000-0315", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2001-03-12T05:00:00.000", "references": [{"url": "ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA1999-004.txt.asc", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://marc.info/?l=bugtraq&m=91893782027835&w=2", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/7575", "source": "cve@mitre.org"}, {"url": "ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA1999-004.txt.asc", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://marc.info/?l=bugtraq&m=91893782027835&w=2", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.osvdb.org/7575", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "traceroute in NetBSD 1.3.3 and Linux systems allows local unprivileged users to modify the source address of the packets, which could be used in spoofing attacks."}], "lastModified": "2024-11-20T23:32:13.180", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:debian:debian_linux:2.0.34:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "89F6AB54-5D9F-4EE2-8AA4-7E61F09C7F17"}, {"criteria": "cpe:2.3:o:digital:unix:4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E1E08495-C0C5-40A9-A8FF-834F5F6083B3"}, {"criteria": "cpe:2.3:o:netbsd:netbsd:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BF5ACB4A-7B75-4B29-813D-EDE7E566A754", "versionEndIncluding": "1.3.3"}, {"criteria": "cpe:2.3:o:redhat:linux:2.0.34:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F3CA3C2F-739A-4E61-803A-877978D70468"}, {"criteria": "cpe:2.3:o:slackware:slackware_linux:2.0.34:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B35CE11D-53A9-4C69-8AC4-2ECE48468125"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}