traceroute in NetBSD 1.3.3 and Linux systems allows local users to flood other systems by providing traceroute with a large waittime (-w) option, which is not parsed properly and sets the time delay for sending packets to zero.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Debian_linux | Debian | 2.0.34 (including) | 2.0.34 (including) |
| Unix | Digital | 4.0 (including) | 4.0 (including) |
| Netbsd | Netbsd | * | 1.3.3 (including) |
| Linux | Redhat | 2.0.34 (including) | 2.0.34 (including) |
| Slackware_linux | Slackware | 2.0.34 (including) | 2.0.34 (including) |
References
- ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA1999-004.txt.asc
- http://marc.info/?l=bugtraq\u0026m=91893782027835\u0026w=2
- http://www.osvdb.org/7574
- ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA1999-004.txt.asc
- http://marc.info/?l=bugtraq\u0026m=91893782027835\u0026w=2
- http://www.osvdb.org/7574