MEDIUM
CVE-1999-0524
CWE-200Published: August 1, 1997· Updated: Jun 16, 2026
4.0
CVSS v3.1
Official Description
ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.
Technical Analysis
CVE-1999-0524 requires local access, meaning attackers must already have a foothold on the target system.
The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.
From a weakness classification perspective (CWE-200): Information exposure vulnerabilities leak sensitive data to unauthorized actors.
CVSS v3.1 Vector Breakdown
Exploitability
Attack VectorLocal
Attack ComplexityLow
Privileges Req.None
User InteractionNone
ScopeUnchanged
Impact
ConfidentialityNone
IntegrityLow
AvailabilityNone
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Affected Vendors & Products
Apple2 product(s)
mac os xmacos
Cisco1 product(s)
ios
HP2 product(s)
hp-uxtru64
IBM2 product(s)
aixos2
Linux1 product(s)
linux kernel
Microsoft1 product(s)
windows
novell1 product(s)
netware
Oracle1 product(s)
solaris
sco1 product(s)
sco unix
sgi1 product(s)
irix
windriver1 product(s)
bsdos
Source: NVD CPE · 14 total CPE entries
Exploit & PoC Resources
NO KNOWN EXPLOITNo public exploit confirmed at this time
Exploit-DB
Offensive Security exploit database
GitHub PoC Search
Community PoC repositories
Rapid7 / Metasploit
Metasploit module search
PacketStorm
Security advisories & exploits
NVD Detail
Official NIST entry
MITRE CVE
CVE Program entry
External links open in a new tab. Always verify in a controlled environment before use.
Official Patches & Advisories
All References (17)
→
http://descriptions.securescout.com/tc/11010Broken Link
→
http://descriptions.securescout.com/tc/11011Broken Link
→
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705Third Party Advisory
→
→
http://www.osvdb.org/95Broken Link
→
https://exchange.xforce.ibmcloud.com/vulnerabilities/306Third Party Advisory · VDB Entry
→
https://exchange.xforce.ibmcloud.com/vulnerabilities/322Third Party Advisory · VDB Entry
→
http://descriptions.securescout.com/tc/11010Broken Link
→
http://descriptions.securescout.com/tc/11011Broken Link
→
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705Third Party Advisory
→
→
http://www.osvdb.org/95Broken Link
→
https://exchange.xforce.ibmcloud.com/vulnerabilities/306Third Party Advisory · VDB Entry
→
https://exchange.xforce.ibmcloud.com/vulnerabilities/322Third Party Advisory · VDB Entry
Quick Facts
CVE IDCVE-1999-0524
CVSS Score4.0 / 10
SeverityMEDIUM
WeaknessCWE-200
CISA KEVNo
Affected11 vendor(s)
PublishedAug 1, 1997
Related CVEs (CWE-200)
Recommended Actions
- →Apply vendor patches immediately
- →Monitor CVE-1999-0524 in threat intel feeds
- →Review IDS/IPS signatures for exploitation attempts
Data sourced from NVD (NIST), CISA KEV, and EPSS (FIRST). Analysis generated by CTIWATCH.COM. CVE data is provided under the NVD usage policy.