Linux ipchains ping -r denial of service
| ipchains-ping-route-dos (7257) |  Medium Risk |
Description:
The ipchains firewall in Linux kernel is vulnerable to a denial of service. Once the Network Address Translation (NAT) is enabled, a remote attacker less than nine hops away can send a ping -r command to cause a kernel panic on the firewall.
Consequences:
Denial of Service
Remedy:
Apply the patch for this vulnerabiity included in the BugTraq Mailing List posting dated Jul 22 1999 11:54PM. See References.
References:
- BugTraq Mailing List, Thu, 22 Jul 1999 10:34:17 -0400: Linux +ipchains+ ping -R.
- BugTraq Mailing List, Thu, 22 Jul 1999 22:54:42 +0200: Re: ping -R causes kernel panic on a forwarding machine ( 2.2.5 a nd 2 .2.10).
- CVE-1999-1339: Vulnerability when Network Address Translation (NAT) is enabled in Linux 2.2.10 and earlier with ipchains, or FreeBSD 3.2 with ipfw, allows remote attackers to cause a denial of service (kernel panic) via a ping -R (record route) command.
- OSVDB ID: 11065: ipchains/ipfw Network Address Translation ping -R DoS
- OSVDB ID: 6105: ipchains Ping -r DoS
Platforms Affected:
- Linux Kernel
Reported:
Jul 22, 1999
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email ignore thisxforceignore this@ignore thisus.ignore thisibm.comignore this