PT-2001-1176 · Recourse · Recourse Mantrap
Publicado
2001-01-09
·
Atualizado
2017-10-10
·
CVE-2000-1140
CVSS v2.0
2.1
Baixa
| Vetor | AV:L/AC:L/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Recourse ManTrap version 1.6
Description
The issue allows attackers to determine if they are in a honeypot system by comparing the results from kill commands with the process listing in the /proc filesystem, due to the software not properly hiding processes.
Recommendations
For Recourse ManTrap version 1.6, consider implementing proper process hiding mechanisms to prevent attackers from identifying the honeypot system. As a temporary workaround, restrict access to the /proc filesystem to minimize the risk of exploitation.
Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Recourse Mantrap