Quick answers
- Is CVE-1999-0074 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-1999-0074 being exploited in the wild.
- How severe is CVE-1999-0074?
- Medium severity, with a CVSS score of 6.4, published 1 July 1997.
- Which products and versions are affected?
- Freebsd, Linux Kernel, Microsoft Windows Nt, Netbsd. The advisory does not name versions.
- Is there a fix for CVE-1999-0074?
- No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
- How is CVE-1999-0074 attacked?
- It is attacked over the network, in an operating system.
- Am I affected by CVE-1999-0074?
- Check whether you run Freebsd, Linux Kernel, Microsoft Windows Nt or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
The vulnerability stems from the sequential allocation of TCP ports for listening services, rather than using a randomized or non-predictable selection process. An unauthenticated remote attacker can predict the next available port number to facilitate connection hijacking or IP spoofing attacks. By anticipating the port used for a specific service, an attacker can inject malicious packets or intercept communication between two legitimate endpoints. This issue is characteristic of early TCP/IP stack implementations in various operating systems. Mitigation typically involves upgrading the operating system kernel to a version that implements ephemeral port randomization.
Affected products
- Freebsd
- Linux Kernel
- Microsoft Windows Nt
- Netbsd
Timeline
- 1997-07-01: disclosed