Traceroute in NetBSD could allow an attacker to flood systems with spoofed packets
| traceroute-packet-flood (6141) |  Low Risk |
Description:
Traceroute, packaged with NetBSD, could allow an attacker to launch a spoofing attack. A vulnerability in the wait time (-w) option could allow the traceroute included with NetBSD to flood other systems with spoofed packets. An attacker could send invalid arguments to the traceroute utility to set the time delay between sending packets to zero, which could cause packets to be sent out at a very fast rate. By changing the source address of the packets, an attacker could flood a remote system with untraceable packets.
Consequences:
Denial of Service
Remedy:
For NetBSD 1.3.3:
Apply the 19990217-traceroute patch, as listed in NetBSD Security Advisory 1999-004. See References.
References:
- BugTraq Mailing List, Sat, 13 Feb 1999 01:38:11 +0100: traceroute as a flooder.
- NetBSD Security Advisory 1999-004: traceroute can create untraceable packet floods. (From SecurityFocus archive.)
- CVE-2000-0314: traceroute in NetBSD 1.3.3 and Linux systems allows local users to flood other systems by providing traceroute with a large waittime (-w) option, which is not parsed properly and sets the time delay for sending packets to zero.
- CVE-2000-0315: traceroute in NetBSD 1.3.3 and Linux systems allows local unprivileged users to modify the source address of the packets, which could be used in spoofing attacks.
- OSVDB ID: 7574: Multiple Vendor traceroute Large waittime DoS
- OSVDB ID: 7575: Multiple Vendor traceroute Source Address Modification
Platforms Affected:
- NetBSD NetBSD 1.3.3
Reported:
Feb 12, 1999
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net