# CVE-1999-0525: Generic IP traceroute enabled from arbitrary hosts

Source: https://junglewise.ai/threats/cve-1999-0525-generic-ip-traceroute-enabled-from-arbitrary-hosts  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 1997-01-01. Updated: 2026-05-10  
License: CC BY 4.0 with a link back

CVE-1999-0525 · Severity: info · CVSS 0 · Published 1997-01-01

A network configuration allows external users to perform traceroute operations against the system. While this is a standard networking function used for troubleshooting, it can allow outsiders to map the internal path of a network. This is generally considered a low-risk information disclosure issue rather than a direct security breach.

## Quick answers

**Is CVE-1999-0525 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-1999-0525 being exploited in the wild.

**How severe is CVE-1999-0525?** Informational severity, with a CVSS score of 0, published 1 January 1997.

**Which products and versions are affected?** Generic IP Stack.

**Is there a fix for CVE-1999-0525?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-1999-0525 attacked?** It is attacked over the network, in an operating system.

**Am I affected by CVE-1999-0525?** Check whether you run IP Stack. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

This is a configuration-based vulnerability where a host or router responds to ICMP Time Exceeded or unreachable messages, or UDP probes, allowing the 'traceroute' utility to function from any source. It is classified as a configuration issue rather than a software flaw. An attacker can use this to discover the hop-by-hop path to a destination and identify internal network topology. Mitigation typically involves configuring firewalls or ACLs to rate-limit or drop ICMP TTL-expired messages and specific UDP port ranges used by traceroute.

## Affected products

- Generic IP Stack

## Timeline

- 1997-01-01: disclosed

## References

- [https://www.cve.org/CVERecord?id=CVE-1999-0525](https://www.cve.org/CVERecord?id=CVE-1999-0525)