Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2003-0804 | First vendor Publication | 2003-11-17 |
| Vendor | Cve | Last vendor Modification | 2008-09-10 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:N/I:N/A:P) | |||
|---|---|---|---|
| Cvss Base Score | 5 | Attack Range | Network |
| Cvss Impact Score | 2.9 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| The arplookup function in FreeBSD 5.1 and earlier, Mac OS X before 10.2.8, and possibly other BSD-based systems, allows remote attackers on a local subnet to cause a denial of service (resource starvation and panic) via a flood of spoofed ARP requests. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0804 |
CPE : Common Platform Enumeration
OpenVAS Exploits
| Date | Description |
|---|---|
| 2008-09-04 | Name : FreeBSD Security Advisory (FreeBSD-SA-03:14.arp.asc) File : nvt/freebsdsa_arp.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 2599 | Multiple Vendor Unix ARP Request DoS Several BSD derived operating systems contain a flaw that may allow a local denial of service. The issue is triggered when a malicious user floods a victim with numerous spoofed ARP requests within a small time period. The arplookup() function does not delete unnecessary ARP entries in the cache when responding to ARP requests. Once full, the cache will no longer accept entries and will result in loss of availability for the system. |
| 2251 | OpenBSD ARP Request DoS OpenBSD contains a flaw that may allow a remote denial of service. The issue is triggered when a local network user to causes a system panic by flooding it with spoofed ARP requests, and will result in loss of availability for the platform. |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2024-02-02 01:02:21 |
|
| 2024-02-01 12:01:28 |
|
| 2023-09-05 12:02:14 |
|
| 2023-09-05 01:01:19 |
|
| 2023-09-02 12:02:16 |
|
| 2023-09-02 01:01:19 |
|
| 2023-08-12 12:02:46 |
|
| 2023-08-12 01:01:19 |
|
| 2023-08-11 12:02:21 |
|
| 2023-08-11 01:01:21 |
|
| 2023-08-06 12:02:10 |
|
| 2023-08-06 01:01:20 |
|
| 2023-08-04 12:02:14 |
|
| 2023-08-04 01:01:21 |
|
| 2023-07-14 12:02:13 |
|
| 2023-07-14 01:01:21 |
|
| 2023-03-29 01:02:13 |
|
| 2023-03-28 12:01:26 |
|
| 2022-10-11 12:01:58 |
|
| 2022-10-11 01:01:13 |
|
| 2021-05-04 12:02:09 |
|
| 2021-04-22 01:02:15 |
|
| 2020-05-23 00:15:30 |
|
| 2019-03-19 12:01:37 |
|
| 2013-05-11 11:53:02 |
|
