CVE-1999-0305
MediumExploitation Probability (EPSS)
Elevated risk68th percentile - higher than 68% of all known CVEs
Summary
The system configuration control (sysctl) facility in BSD based operating systems OpenBSD 2.2 and earlier, and FreeBSD 2.2.5 and earlier, does not properly restrict source routed packets, allowing remote attackers to spoof TCP connections.
Risk Assessment
Attackers can exploit this vulnerability to hijack TCP connections, potentially leading to unauthorized access to systems and data.
Recommendation
It is recommended to upgrade systems to newer versions that address source routing handling and to implement additional security measures to mitigate the risk.
Original NVD description (English source)
The system configuration control (sysctl) facility in BSD based operating systems OpenBSD 2.2 and earlier, and FreeBSD 2.2.5 and earlier, does not properly restrict source routed packets even when the (1) dosourceroute or (2) forwarding variables are set, which allows remote attackers to spoof TCP connections.