CVE-1999-1503

Medium

Published: 08/04/1998(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.27%

66th percentile - higher than 66% of all known CVEs

Summary

Network Flight Recorder (NFR) versions 1.5 and 1.6 are vulnerable to a denial of service attack that can crash the nfrd service. Attackers can achieve this by sending a TCP packet with a null header and data field.

Risk Assessment

This vulnerability may lead to service downtime, affecting system availability and potentially disrupting organizational operations.

Recommendation

It is recommended to upgrade to the latest version of Network Flight Recorder to mitigate the risk associated with this vulnerability.

Original NVD description (English source)

Network Flight Recorder (NFR) 1.5 and 1.6 allows remote attackers to cause a denial of service in nfrd (crash) via a TCP packet with a null header and data field.