CVE-1999-1339
MediumExploitation Probability (EPSS)
High risk83th percentile - higher than 83% of all known CVEs
Summary
The vulnerability exists in Linux 2.2.10 and earlier and FreeBSD 3.2 when NAT is enabled. It allows remote attackers to cause a denial of service (kernel panic) via a ping -R (record route) command.
Risk Assessment
Attackers can remotely trigger a system crash, leading to service availability interruptions. This can impact the stability and security of the entire IT infrastructure.
Recommendation
It is recommended to update systems to newer versions that are not vulnerable to this issue. Additionally, consider restricting access to the ping function for remote users.
Original NVD description (English source)
Vulnerability when Network Address Translation (NAT) is enabled in Linux 2.2.10 and earlier with ipchains, or FreeBSD 3.2 with ipfw, allows remote attackers to cause a denial of service (kernel panic) via a ping -R (record route) command.