CVE-2000-0489

FreeBSD, NetBSD, and OpenBSD allow an attacker to cause a denial of service by creating a large number of socket pairs using the socketpair function, setting a large buffer size via setsockopt, then writing large buffers.

CVSS v2.0 2.1 LOW

2.1^/10

CVSS v2.0 : LOW

Vector : AV:L/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 3.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References

Link	Resource
http://www.securityfocus.com/bid/622
http://www.securityfocus.com/templates/archive.pike?list=1&msg=NCBBKFKDOLAGKIAPMILPCEJLCEAA.labs%40ussrback.com
http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.9908270039010.16315-100000%40thetis.deor.org
https://exchange.xforce.ibmcloud.com/vulnerabilities/3298

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:freebsd:freebsd:3.0:::::::*
	cpe:2.3:o:freebsd:freebsd:3.1:::::::*
	cpe:2.3:o:freebsd:freebsd:3.2:::::::*
	cpe:2.3:o:freebsd:freebsd:3.3:::::::*
	cpe:2.3:o:freebsd:freebsd:3.4:::::::*
	cpe:2.3:o:freebsd:freebsd:3.5:::::::*
	cpe:2.3:o:freebsd:freebsd:4.0:::::::*
	cpe:2.3:o:freebsd:freebsd:5.0:alpha::::::
	cpe:2.3:o:netbsd:netbsd:1.4::x86:::::
	cpe:2.3:o:netbsd:netbsd:1.4.1::alpha:::::
	cpe:2.3:o:netbsd:netbsd:1.4.1::arm32:::::
	cpe:2.3:o:netbsd:netbsd:1.4.1::sparc:::::
	cpe:2.3:o:netbsd:netbsd:1.4.1::x86:::::
	cpe:2.3:o:netbsd:netbsd:1.4.2::alpha:::::
	cpe:2.3:o:netbsd:netbsd:1.4.2::arm32:::::
	cpe:2.3:o:netbsd:netbsd:1.4.2::sparc:::::
	cpe:2.3:o:netbsd:netbsd:1.4.2::x86:::::
	cpe:2.3:o:openbsd:openbsd:2.5:::::::*
	cpe:2.3:o:openbsd:openbsd:2.6:::::::*
	cpe:2.3:o:openbsd:openbsd:2.7:::::::*

History

No history.

Information

Published : 1999-09-05 04:00

Updated : 2023-11-07 01:55

NVD link : CVE-2000-0489

Mitre link : CVE-2000-0489

CVE.ORG link : CVE-2000-0489

JSON object : View

Products Affected

openbsd

openbsd

netbsd

netbsd

freebsd

freebsd

CWE

NVD-CWE-Other

{"id": "CVE-2000-0489", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "1999-09-05T04:00:00.000", "references": [{"url": "http://www.securityfocus.com/bid/622", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/templates/archive.pike?list=1&msg=NCBBKFKDOLAGKIAPMILPCEJLCEAA.labs%40ussrback.com", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.9908270039010.16315-100000%40thetis.deor.org", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/3298", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "FreeBSD, NetBSD, and OpenBSD allow an attacker to cause a denial of service by creating a large number of socket pairs using the socketpair function, setting a large buffer size via setsockopt, then writing large buffers."}], "lastModified": "2023-11-07T01:55:19.320", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:freebsd:freebsd:3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EE38C50A-81FE-412E-9717-3672FAE6A6F4"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "263F3734-7076-4EA8-B4C0-F37CFC4E979E"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:3.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0419DD66-FF66-48BC-AD3B-F6AFD0551E36"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:3.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C3518628-08E5-4AD7-AAF6-A4E38F1CDE2C"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:3.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B982342C-1981-4C55-8044-AFE4D87623DF"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:3.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "47E02BE6-4800-4940-B269-385B66AC5077"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D0A585A1-FF82-418F-90F8-072458DB7816"}, {"criteria": "cpe:2.3:o:freebsd:freebsd:5.0:alpha:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3B13D898-C1B6-44B9-8432-7DDB8A380E9E"}, {"criteria": "cpe:2.3:o:netbsd:netbsd:1.4:*:x86:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4319B741-4376-4EA2-9FEB-236C148D1514"}, {"criteria": "cpe:2.3:o:netbsd:netbsd:1.4.1:*:alpha:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "247ABD95-74CA-45B8-8729-3C35C9E11186"}, {"criteria": "cpe:2.3:o:netbsd:netbsd:1.4.1:*:arm32:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1D4C44E8-075A-4B48-88DA-2CAC25CDF159"}, {"criteria": "cpe:2.3:o:netbsd:netbsd:1.4.1:*:sparc:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "19D1E7AC-79B6-4136-ADB2-06BEE9773795"}, {"criteria": "cpe:2.3:o:netbsd:netbsd:1.4.1:*:x86:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E2EE8A19-8AB1-4283-95EA-9EE3C7E5DED7"}, {"criteria": "cpe:2.3:o:netbsd:netbsd:1.4.2:*:alpha:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6FA1C84C-6624-4032-8D0E-5EBB054F5224"}, {"criteria": "cpe:2.3:o:netbsd:netbsd:1.4.2:*:arm32:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "06B9ADAD-ADDC-47AC-9924-B31B17DDF163"}, {"criteria": "cpe:2.3:o:netbsd:netbsd:1.4.2:*:sparc:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6DC0D30E-DBF1-4FDB-80C0-80DB50D9E77A"}, {"criteria": "cpe:2.3:o:netbsd:netbsd:1.4.2:*:x86:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "537FD523-1D44-4D85-AED1-C092E0155CF2"}, {"criteria": "cpe:2.3:o:openbsd:openbsd:2.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ACE7FDFB-C6A6-4B58-B0B4-236E4EA76EF6"}, {"criteria": "cpe:2.3:o:openbsd:openbsd:2.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0DF053A1-C252-427E-9EEF-27240F422976"}, {"criteria": "cpe:2.3:o:openbsd:openbsd:2.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "48A9C344-45AA-47B9-B35A-1A62E220D9C6"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}