CVE-1999-0305

NONE EPSS 68.7%

Published Feb 1, 199828y ago · Modified Jun 16, 20262w ago

Published Feb 1, 1998 28y ago

Last Modified Jun 16, 2026 2w ago

Description

The system configuration control (sysctl) facility in BSD based operating systems OpenBSD 2.2 and earlier, and FreeBSD 2.2.5 and earlier, does not properly restrict source routed packets even when the (1) dosourceroute or (2) forwarding variables are set, which allows remote attackers to spoof TCP connections.

Threat Intelligence

EPSS Exploit Probability

68.7% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Affected Products 6

Vendor	Product	Version	Range
bsdi	bsd_os	*	any
freebsd	freebsd	2.2	any
freebsd	freebsd	2.2.5	any
openbsd	openbsd	2.0	any
openbsd	openbsd	2.1	any
openbsd	openbsd	2.2	any

References 3

openbsd.org http://www.openbsd.org/advisories/sourceroute.txt
osvdb.org http://www.osvdb.org/11502
exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/736

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.