PT-2002-1620 · Linux · Linux Kernel

Publicado 2002-06-11 · Atualizado 2017-12-19 · CVE-2002-0570

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.4.10

Description The issue concerns the encrypted loop device in the Linux kernel, which fails to authenticate the entity encrypting data. This allows local users to modify encrypted data without needing to know the encryption key.

Recommendations For Linux kernel versions prior to 2.4.10, update to a version that addresses this issue to ensure proper authentication of entities encrypting data.

Correção

Identificadores relacionados

CVE-2002-0570

Produtos afetados

Linux Kernel

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2002-0570 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7769 · Nota
• http://securityfocus.com/bid/3775 · Aviso do Fabricante
• http://archives.neohapsis.com/archives/bugtraq/2002-01/0010.html · Aviso do Fabricante