Back to Database
Status published
Medium
CVE-1999-0305
The system configuration control (sysctl) facility in BSD based operating...
Vulnerability Description
The system configuration control (sysctl) facility in BSD based operating systems OpenBSD 2.2 and earlier, and FreeBSD 2.2.5 and earlier, does not properly restrict source routed packets even when the (1) dosourceroute or (2) forwarding variables are set, which allows remote attackers to spoof TCP connections.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-1999-0305
Credits & Attribution
No credits recorded in the NVD database.
References
More from bsdi
View All →CVE-2001-1541
Buffer overflow in Unix-to-Unix Copy Protocol (UUCP) in BSDI BSD/OS...
High
7.2
CVE-2001-1133
Vulnerability in a system call in BSDI 3.0 and 3.1...
Low
2.1
CVE-2000-1103
rcvtty in BSD 3.0 and 4.0 does not properly drop...
High
7.2
CVE-1999-1047
When BSDI patches for Gauntlet 5.0 BSDI are installed in...
High
7.5
CVE-1999-0880
Denial of service in WU-FTPD via the SITE NEWER command,...
Medium
5
Affected Vendor
bsdi
View all reports →Affected Software
bsd os, freebsd, openbsd
Vulnerable Versions:
2.2, 2.2.5, 2.0, 2.1
Timeline
Official Publish:
September 29th, 1999
Last Modified:
August 1st, 2024
Added to House:
July 17th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.