Is CVE-1999-0524 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-1999-0524 being exploited in the wild.

How severe is CVE-1999-0524?

Low severity, with a CVSS score of 2.1, published 1 August 1997.

Which products and versions are affected?

Linux Linux Kernel; Microsoft Windows; Apple macOS; Cisco IOS; and 3 more.

Is there a fix for CVE-1999-0524?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-1999-0524 attacked?

It is attacked over the network, in an operating system.

Am I affected by CVE-1999-0524?

Check whether you run Apple Mac Os X, Apple macOS, Cisco IOS or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-1999-0524: Multiple Vendors ICMP Information Disclosure via Netmask and Timestamp Requests

CVE-1999-0524 · Severity: low · CVSS 2.1 · Published 1997-08-01

Many operating systems and networking devices are configured by default to respond to certain diagnostic network messages (ICMP). An attacker can use these responses to discover internal network settings and synchronize timing for more complex attacks. While not a direct way to take over a system, this information helps attackers map out a target's infrastructure.

Technologies: Apple macOS, Cisco IOS, Hp-Ux, IBM Aix, Linux Kernel, Microsoft Windows, Novell Netware, Oracle Solaris, Sco Unix, Sgi Irix. Vendors: Apple, Cisco, Hp, IBM, Linux, Microsoft, Novell, Oracle, Sco, Sgi.

Quick answers

Is CVE-1999-0524 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-1999-0524 being exploited in the wild.
How severe is CVE-1999-0524?: Low severity, with a CVSS score of 2.1, published 1 August 1997.
Which products and versions are affected?: Linux Linux Kernel; Microsoft Windows; Apple macOS; Cisco IOS; and 3 more.
Is there a fix for CVE-1999-0524?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-1999-0524 attacked?: It is attacked over the network, in an operating system.
Am I affected by CVE-1999-0524?: Check whether you run Apple Mac Os X, Apple macOS, Cisco IOS or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The affected systems respond to ICMP Type 13 (Timestamp Request) and ICMP Type 17 (Address Mask Request) messages. A response to Type 17 leaks the subnet mask of the responding interface, assisting in network topology mapping. A response to Type 13 leaks the system clock, which can be used for time-skew correlation, fingerprinting, or predicting sequence numbers in weak cryptographic protocols. This is a configuration-based information disclosure vulnerability (CWE-200). Mitigation typically involves configuring firewalls or host-based security policies to drop these specific ICMP types.

Affected products

Linux Linux Kernel
Microsoft Windows
Apple macOS
Cisco IOS
Oracle Solaris
IBM AIX
HP HP-UX

Timeline

1997-08-01: disclosed: Initial publication date

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.