CVE-ID

CVE-1999-0001

• Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings
Description
ip_input.c in BSD-derived TCP/IP implementations allows remote attackers to cause a denial of service (crash or hang) via crafted packets.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
Date Entry Created
19990607 Disclaimer: The entry creation date may reflect when the CVE-ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Modified (20051217)
Votes (Legacy)
MODIFY(1) Frech
NOOP(2) Northcutt, Wall
REVIEWING(1) Christey
Comments (Legacy)
 Christey> A Bugtraq posting indicates that the bug has to do with
   "short packets with certain options set," so the description
   should be modified accordingly.
   
   But is this the same as CVE-1999-0052?  That one is related
   to nestea (CVE-1999-0257) and probably the one described in
   BUGTRAQ:19981023 nestea v2 against freebsd 3.0-Release
   The patch for nestea is in ip_input.c around line 750.
   The patches for CVE-1999-0001 are in lines 388&446.  So, 
   CVE-1999-0001 is different from CVE-1999-0257 and CVE-1999-0052.
   The FreeBSD patch for CVE-1999-0052 is in line 750.
   So, CVE-1999-0257 and CVE-1999-0052 may be the same, though
   CVE-1999-0052 should be RECAST since this bug affects Linux
   and other OSes besides FreeBSD.
 Frech> XF:teardrop(338)
   This assignment was based solely on references to the CERT advisory.
 Christey> The description for BID:190, which links to CVE-1999-0052 (a
   FreeBSD advisory), notes that the patches provided by FreeBSD in
   CERT:CA-1998-13 suggest a connection between CVE-1999-0001 and
   CVE-1999-0052.  CERT:CA-1998-13 is too vague to be sure without
   further analysis.

Proposed (Legacy)
19990728
This is an entry on the CVE list, which standardizes names for security problems.