CVE-1999-0770

LowCVSS 2.1/10Last modified Jun 16, 2026

Description

Firewall-1 sets a long timeout for connections that begin with ACK or other packets except SYN, allowing an attacker to conduct a denial of service via a large number of connection attempts to unresponsive systems.

Metrics

CVSS 2.0 2.1/10AV:L/AC:L/Au:N/C:N/I:N/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.osvdb.org/1027
http://www.securityfocus.com/bid/549Exploit, Patch, Vendor Advisory
http://www.osvdb.org/1027
http://www.securityfocus.com/bid/549Exploit, Patch, Vendor Advisory

Timeline

Published: Jul 29, 1999
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 1999

CVE-1999-07715.0The web components of Compaq Management Agents and the Compaq Survey Utility allow a remote attacker to read arbitrary files via a .. (dot d CVE-1999-07726.4Denial of service in Compaq Management Agents and the Compaq Survey Utility via a long string sent to port 2301.CVE-1999-07737.2Buffer overflow in Solaris lpset program allows local users to gain root access.CVE-1999-07747.2Buffer overflows in Mars NetWare Emulation (NWE, mars_nwe) package via long directory names.CVE-1999-077510.0Cisco Gigabit Switch routers running IOS allow remote attackers to forward unauthorized packets due to improper handling of the "established CVE-1999-07765.0Alibaba HTTP server allows remote attackers to read files via a .. (dot dot) attack.CVE-1999-07777.5IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they have "No Access" permissions.CVE-1999-07787.2Buffer overflow in Xi Graphics Accelerated-X server allows local users to gain root access via a long display or query parameter.CVE-1999-07845.0Denial of service in Oracle TNSLSNR SQL*Net Listener via a malformed string to the listener port, aka NERP.CVE-1999-07857.2The INN inndstart program allows local users to gain root privileges via the "pathrun" parameter in the inn.conf file.CVE-1999-07864.6The dynamic linker in Solaris allows a local user to create arbitrary files via the LD_PROFILE environmental variable and a symlink attack.CVE-1999-07872.1The SSH authentication agent follows symlinks via a UNIX domain socket.