Exploitation Summary
EIP tracks 1 public exploit for CVE-1999-1018. PoCs published by Michal Zalewski.
AI-analyzed exploit summary This exploit targets a denial-of-service vulnerability in Linux kernel 2.0.33 by sending malformed IP fragments that trigger a printk function without proper bounds checking, causing a system reboot. The code crafts and sends oversized packets with specific offsets to exploit the vulnerability.
Description
IPChains in Linux kernels 2.2.10 and earlier does not reassemble IP fragments before checking the header information, which allows a remote attacker to bypass the filtering rules using several fragments with 0 offsets.
Exploits (1)
This exploit targets a denial-of-service vulnerability in Linux kernel 2.0.33 by sending malformed IP fragments that trigger a printk function without proper bounds checking, causing a system reboot. The code crafts and sends oversized packets with specific offsets to exploit the vulnerability.