Test ID:	1.3.6.1.4.1.25623.1.0.10113
Category:	Firewalls
Title:	icmp netmask request
Summary:	NOSUMMARY
Description:	Description: The remote host answered to an ICMP_MASKREQ query and sent us its netmask . An attacker can use this information to understand how your network is set up and how the routing is done. This may help him to bypass your filters. Solution : reconfigure the remote host so that it does not answer to those requests. Set up filters that deny ICMP packets of type 17. Risk factor : Low
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-1999-0524 http://descriptions.securescout.com/tc/11010 http://descriptions.securescout.com/tc/11011 http://kb.vmware.com/selfservice/microsites/search.do?cmd=displayKC&externalId=1434 http://www.osvdb.org/95 XForce ISS Database: icmp-netmask(306) https://exchange.xforce.ibmcloud.com/vulnerabilities/306 XForce ISS Database: icmp-timestamp(322) https://exchange.xforce.ibmcloud.com/vulnerabilities/322
Copyright	This script is Copyright (C) 1999 Renaud Deraison

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.