traceroute in NetBSD 1.3.3 and Linux systems allows local unprivileged users to modify the source address of the packets, which could be used in spoofing attacks.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Debian_linux | Debian | 2.0.34 (including) | 2.0.34 (including) |
| Unix | Digital | 4.0 (including) | 4.0 (including) |
| Netbsd | Netbsd | * | 1.3.3 (including) |
| Linux | Redhat | 2.0.34 (including) | 2.0.34 (including) |
| Slackware_linux | Slackware | 2.0.34 (including) | 2.0.34 (including) |
References
- ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA1999-004.txt.asc
- http://marc.info/?l=bugtraq\u0026m=91893782027835\u0026w=2
- http://www.osvdb.org/7575
- ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA1999-004.txt.asc
- http://marc.info/?l=bugtraq\u0026m=91893782027835\u0026w=2
- http://www.osvdb.org/7575