Unscored severity · published Feb 12, 2001
CVE-2001-0026
rp-pppoe PPPoE client allows remote attackers to cause a denial of service via the Clamp MSS option and a TCP packet with a zero-length TCP option
–
CVSS
8.4%
EPSS
No
On KEV
Description
rp-pppoe PPPoE client allows remote attackers to cause a denial of service via the Clamp MSS option and a TCP packet with a zero-length TCP option.
Exploitation
Is it being used?
Exploit prediction (EPSS)8.4% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PP
Pppoe · Roaring Penguin
2.0; 2.1; 2.2; 2.3; 2.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2001-0026
CVE.org
https://www.cve.org/CVERecord?id=CVE-2001-0026
Patch
http://archives.neohapsis.com/archives/bugtraq/2000-12/0134.html
distro.conectiva.com.br
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000357
www.linux-mandrake.com
http://www.linux-mandrake.com/en/security/MDKSA-2000-084.php3
Exploit
http://www.redhat.com/support/errata/RHSA-2000-130.html
Patch
http://www.securityfocus.com/bid/2098
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/5727
More from Pppoe
–
CVE-2004-0564
Roaring Penguin pppoe (rp-ppoe), if installed or configured to run setuid root contrary to its design, allows local users to overwrite arbitrary files