CVE

Id
521  
CVE No.
CVE-1999-0524  
Status
Candidate  
Description
ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.  
Phase
Modified (20161206)  
Votes
MODIFY(3) Baker, Frech, Meunier | REJECT(1) Northcutt  
Comments
Frech> XF:icmp-timestamp | XF:icmp-netmask | Meunier> If this is not merged with 1999-0523 as I commented for that | CVE, then the description should be changed to "ICMP messages of types | 13 and 14 (timestamp request and reply) and 17 and 18 (netmask request | and reply) are acted upon without any access control". It"s a more | precise and correct language. I believe that this is a valid CVE | entry (it"s a common source of vulnerabilities or exposures) even | though I see that the inferred action was "reject". Knowing the time | of a host also allows attacks against random number generators that | are seeded with the current time. I want to push to have it accepted. | Baker> I agree with the description changes suggested by Pascal  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
1076 521 CVE-1999-0524 MISC:http://descriptions.securescout.com/tc/11010  View
1077 521 CVE-1999-0524 MISC:http://descriptions.securescout.com/tc/11011  View
1078 521 CVE-1999-0524 MISC:http://kb.vmware.com/selfservice/microsites/search.do?cmd=displayKC&externalId=1434  View
1079 521 CVE-1999-0524 CONFIRM:https://kc.mcafee.com/corporate/index?page=content&id=SB10053  View
1080 521 CVE-1999-0524 CONFIRM:http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705  View
1081 521 CVE-1999-0524 OSVDB:95  View
1082 521 CVE-1999-0524 URL:http://www.osvdb.org/95  View
1083 521 CVE-1999-0524 XF:icmp-netmask(306)  View
1084 521 CVE-1999-0524 URL:http://xforce.iss.net/xforce/xfdb/306  View
1085 521 CVE-1999-0524 XF:icmp-timestamp(322)  View

Related JVN