CVE-1999-0909

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Multihomed Windows systems allow a remote attacker to bypass IP source routing restrictions via a malformed packet with IP options, aka the "Spoofed Route Pointer" vulnerability.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-264

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

Timeline

Published: Sep 20, 1999
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 1999

CVE-1999-09105.0Microsoft Site Server and Commercial Internet System (MCIS) do not set an expiration for a cookie, which could then be cached by a proxy and CVE-1999-091110.0Buffer overflow in ProFTPD, wu-ftpd, and beroftpd allows remote attackers to gain root access via a series of MKD and CWD commands that crea CVE-1999-09122.1FreeBSD VFS cache (vfs_cache) allows local users to cause a denial of service by opening a large number of files.CVE-1999-091310.0dfire.cgi script in Dragon-Fire IDS allows remote users to execute commands via shell metacharacters.CVE-1999-09147.2Buffer overflow in the FTP client in the Debian GNU/Linux netstd package.CVE-1999-09155.0URL Live! web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.CVE-1999-09162.1WebTrends software stores account names and passwords in a file which does not have restricted access permissions.CVE-1999-09175.1The Preloader ActiveX control used by Internet Explorer allows remote attackers to read arbitrary files.CVE-1999-09187.8Denial of service in various Windows systems via malformed, fragmented IGMP packets.CVE-1999-092010.0Buffer overflow in the pop-2d POP daemon in the IMAP package allows remote attackers to gain privileges via the FOLD command.CVE-1999-09215.0BMC Patrol allows any remote attacker to flood its UDP port, causing a denial of service.CVE-1999-09225.0An example application in ColdFusion Server 4.0 allows remote attackers to view source code via the sourcewindow.cfm file.