CVE-1999-0524 : ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.

ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.

Published 1997-08-01 04:00:00

Updated 2022-11-14 19:33:21

Source MITRE

View at NVD, CVE.org

Vulnerability category: Information leak

Exploit prediction scoring system (EPSS) score for CVE-1999-0524

Probability of exploitation activity in the next 30 days: 88.08%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 98 % EPSS Score History EPSS FAQ

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
2.1	LOW	AV:L/AC:L/Au:N/C:P/I:N/A:N	3.9	2.9	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Assigned by: nvd@nist.gov (Primary)

Red Hat 2010-01-05

Red Hat Enterprise Linux is configured by default to respond to all ICMP requests. Users may configure the firewall to prevent a system from responding to certain ICMP requests.

SGI » Irix » Version: N/A
cpe:2.3:o:sgi:irix:-:*:*:*:*:*:*:*
Matching versions
HP » Hp-ux » Version: N/A
cpe:2.3:o:hp:hp-ux:-:*:*:*:*:*:*:*
Matching versions
HP » Tru64 » Version: N/A
cpe:2.3:o:hp:tru64:-:*:*:*:*:*:*:*
Matching versions
IBM » AIX » Version: N/A
cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*
Matching versions
IBM » OS2 » Version: N/A
cpe:2.3:o:ibm:os2:-:*:*:*:*:*:*:*
Matching versions
Cisco » IOS » Version: N/A
cpe:2.3:o:cisco:ios:-:*:*:*:*:*:*:*
Matching versions
SCO » Sco Unix » Version: N/A
cpe:2.3:o:sco:sco_unix:-:*:*:*:*:*:*:*
Matching versions
Novell » Netware » Version: N/A
cpe:2.3:o:novell:netware:-:*:*:*:*:*:*:*
Matching versions
Microsoft » Windows » Version: N/A
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel » Version: N/A
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
Matching versions
Apple » Mac Os X » Version: N/A
cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*
Matching versions
Apple » Macos » Version: N/A
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
Matching versions
Oracle » Solaris » Version: N/A
cpe:2.3:o:oracle:solaris:-:*:*:*:*:*:-:*
Matching versions
Windriver » Bsdos » Version: N/A
cpe:2.3:o:windriver:bsdos:-:*:*:*:*:*:*:*
Matching versions