CVE-1999-0451

In Linux before version 2.0.36, remote attackers can spoof a TCP connection and pass data to the application layer before fully establishing the connection.

IP masquerading in Linux 2.2.x allows remote attackers to route UDP packets through the internal interface by modifying the external source IP address and port number to match those of an established connection.

The ping command in Linux 2.0.3x allows local users to cause a denial of service by sending large packets with the -R (record route) option.

The mknod command in Linux 2.2 follows symbolic links, which could allow local users to overwrite files or gain privileges.

Linux version 2.0.37 does not properly encode the Custom segment limit, allowing local users to gain root privileges by accessing and modifying kernel memory.

CVE-1999-0400 affects Linux version 2.2.0, where executing the ldd command on a core file can lead to a denial of service attack.

A race condition in Linux 2.2.1 allows local users to read arbitrary memory from /proc files.

Linux version 2.0.34 does not properly prevent users from sending SIGIO signals to arbitrary processes, allowing local users to cause a denial of service by sending SIGIO to processes that do not catch it.