PT-2002-2697 · Linux+1 · Linux Kernel+1

Publicado 2002-12-31 · Atualizado 2008-09-05 · CVE-2002-1976

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions 2.2 and later

Description The issue allows attackers to sniff the network without detection when the network interface is in promiscuous mode, set using PACKET MR PROMISC. This is because ifconfig does not report the promiscuous mode status in such cases.

Recommendations For Linux kernel versions 2.2 and later, consider using alternative methods to detect promiscuous mode, such as checking the interface settings directly, until a fix is available. As a temporary workaround, consider monitoring network traffic closely to detect potential sniffing attempts.

Correção

Identificadores relacionados

CVE-2002-1976

ECHO-35AF-8DFC-9FEE

Produtos afetados

Debian

Linux Kernel

Referências · 9

• http://online.securityfocus.com/archive/1/284257 · Nota
• http://archives.neohapsis.com/archives/bugtraq/2002-07/0279.html · Nota
• http://securityfocus.com/bid/5304 · Correção
• https://security-tracker.debian.org/tracker/CVE-2002-1976 · Aviso do Fabricante
• http://online.securityfocus.com/archive/1/284142 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1976 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2002-1976 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2002-1976 · Aviso do Fabricante
• http://iss.net/security_center/static/9676.php · Nota