CVE-1999-0513
CVE-1999-0513 is a medium-severity vulnerability in Digital Unix with a CVSS 2.0 base score of 5.0. Its EPSS exploit-prediction score of 70% places it in the 99th percentile, indicating an elevated likelihood of exploitation.
Key facts
- Severity: Medium (CVSS 2.0 base score 5.0)
- EPSS exploit prediction: 70% (99th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Digital Unix
- Published:
- Last modified:
Description
ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service.
Frequently asked questions
- What is CVE-1999-0513?
- ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service.
- How severe is CVE-1999-0513?
- CVE-1999-0513 has a CVSS 2.0 base score of 5.0, rated medium severity.
- Is CVE-1999-0513 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 70% (99th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-1999-0513?
- CVE-1999-0513 primarily affects Digital Unix. In total, 33 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-1999-0513?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-1999-0513 published?
- CVE-1999-0513 was published on 1998-01-05 and last updated on 2026-06-16.
References
Affected products (33)
- cpe:2.3:o:digital:unix:3.2g:*:*:*:*:*:*:*
- cpe:2.3:o:digital:unix:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:digital:unix:4.0a:*:*:*:*:*:*:*
- cpe:2.3:o:digital:unix:4.0b:*:*:*:*:*:*:*
- cpe:2.3:o:digital:unix:4.0c:*:*:*:*:*:*:*
- cpe:2.3:o:digital:unix:4.0d:*:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:1.1.5.1:*:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:2.0.5:*:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:2.1.0:*:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:2.1.5:*:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:2.1.6:*:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:2.1.7.1:*:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:2.2.2:*:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:2.2.3:*:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:2.2.4:*:*:*:*:*:*:*
- cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*
- cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*
- cpe:2.3:o:ibm:aix:3.1:*:*:*:*:*:*:*
- cpe:2.3:o:ibm:aix:3.2:*:*:*:*:*:*:*
- cpe:2.3:o:ibm:aix:3.2.4:*:*:*:*:*:*:*
- cpe:2.3:o:ibm:aix:3.2.5:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.0:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:2.1:*:*:*:*:*:*:*
- cpe:2.3:o:netbsd:netbsd:1.2:*:*:*:*:*:*:*
- cpe:2.3:o:sun:solaris:2.4:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:solaris:2.5:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:solaris:2.5.1:*:ppc:*:*:*:*:*
- cpe:2.3:o:sun:solaris:2.5.1:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*
- cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*
- cpe:2.3:o:sun:sunos:5.4:*:*:*:*:*:*:*
- cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*
- cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*
More vulnerabilities in Digital Unix
- CVE-2001-0134 — Critical (CVSS 10.0): Buffer overflow in cpqlogin.htm in web-enabled agents for various Compaq management software products such as Insight…
- CVE-1999-0073 — Critical (CVSS 10.0): Telnet allows a remote client to specify environment variables including LD_LIBRARY_PATH, allowing an attacker to…
- CVE-1999-0687 — High (CVSS 7.5): The ToolTalk ttsession daemon uses weak RPC authentication, which allows a remote attacker to execute commands.
- CVE-2001-0369 — High (CVSS 7.2): Buffer overflow in lpsched on DGUX version R4.20MU06 and MU02 allows a local attacker to obtain root access via a long…
- CVE-1999-0691 — High (CVSS 7.2): Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a…
- CVE-1999-0713 — High (CVSS 7.2): The dtlogin program in Compaq Tru64 UNIX allows local users to gain root privileges.