CVE-2000-0315

traceroute in NetBSD 1.3.3 and Linux systems allows local unprivileged users to modify the source address of the packets, which could be used in spoofing attacks.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA1999-004.txt.asc	Patch Vendor Advisory
http://www.osvdb.org/7575
http://marc.info/?l=bugtraq&m=91893782027835&w=2

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:redhat:linux:2.0.34:::::::*
	cpe:2.3:o:slackware:slackware_linux:2.0.34:::::::*
	cpe:2.3:o:netbsd:netbsd::::::::
	cpe:2.3:o:debian:debian_linux:2.0.34:::::::*
	cpe:2.3:o:digital:unix:4.0:::::::*

Information

Published : 2001-03-11 21:00

Updated : 2016-10-17 19:06

NVD link : CVE-2000-0315

Mitre link : CVE-2000-0315

JSON object : View

CWE

NVD-CWE-Other

Products Affected

digital

unix

netbsd

netbsd

redhat

linux

slackware

slackware_linux

debian

debian_linux

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA1999-004.txt.asc", "name": "NetBSD-SA1999-004", "tags": ["Patch", "Vendor Advisory"], "refsource": "NETBSD"}, {"url": "http://www.osvdb.org/7575", "name": "7575", "tags": [], "refsource": "OSVDB"}, {"url": "http://marc.info/?l=bugtraq&m=91893782027835&w=2", "name": "19990213 traceroute as a flooder", "tags": [], "refsource": "BUGTRAQ"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "traceroute in NetBSD 1.3.3 and Linux systems allows local unprivileged users to modify the source address of the packets, which could be used in spoofing attacks."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2000-0315", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "severity": "MEDIUM", "impactScore": 2.9, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2001-03-12T05:00Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:redhat:linux:2.0.34:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:slackware:slackware_linux:2.0.34:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:netbsd:netbsd:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "1.3.3"}, {"cpe23Uri": "cpe:2.3:o:debian:debian_linux:2.0.34:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:digital:unix:4.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2016-10-18T02:06Z"}

5.0 /10