CVE-1999-1423

Solaris 2.3-2.6 - Denial of Service via Multicast Ping Request

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-1999-1423. PoCs published by Adam Caldwell.

AI-analyzed exploit summary This exploit leverages a denial of service vulnerability in the ping utility by sending multicast ping requests through the loopback interface, causing a system panic due to an uninitialized incoming queue pointer.

Description

ping in Solaris 2.3 through 2.6 allows local users to cause a denial of service (crash) via a ping request to a multicast address through the loopback interface, e.g. via ping -i.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Adam Caldwell · textdossolaris

https://www.exploit-db.com/exploits/19161

View Code ZIP pw:eip

This exploit leverages a denial of service vulnerability in the ping utility by sending multicast ping requests through the loopback interface, causing a system panic due to an uninitialized incoming queue pointer.

Classification

Working Poc 90%

Attack Type

Dos

Complexity

Trivial

Reliability

Reliable

Target: ping utility (various Unix-like systems)

No auth needed

Prerequisites: Access to execute the ping command on the target system

MITRE ATT&CK