Test case 11010

ICMP netmask request, corresponding to CVE-1999-0524.

Vulnerability summary

ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.

What this test case checks

This test case probes a host for ICMP type 17 (Address Mask Request) responses. A response leaks the subnet mask of the responding interface, which assists attackers in mapping the local network topology. Most modern systems do not respond to type 17 by default.

CVE details

CVE ID
CVE-1999-0524
Published
1997-08-01
CVSS v2.0
Base score 2.1 · AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected
ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts

References