PT-2002-2770 · Fragroute+2 · Fragroute+1

Publicado 2002-12-31 · Atualizado 2008-09-05 · CVE-2002-2049

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Dsniff version 2.3 fragroute version 1.2 fragrouter version 1.6

Description The issue concerns a backdoor in the specified software versions, which allows remote attackers to access the system. This backdoor was introduced when the software was downloaded from monkey.org on May 17, 2002.

Recommendations For Dsniff version 2.3, avoid using the version downloaded from monkey.org on May 17, 2002, to prevent potential backdoor exploitation. For fragroute version 1.2, refrain from using the version downloaded from monkey.org on May 17, 2002, until a clean version can be obtained. For fragrouter version 1.6, do not use the version downloaded from monkey.org on May 17, 2002, as it may contain a backdoor. At the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Identificadores relacionados

CVE-2002-2049

Produtos afetados

Dsniff

Fragroute

Referências · 5

• http://iss.net/security_center/static/9272.php · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2002-2049 · Nota de Segurança
• http://archives.neohapsis.com/archives/bugtraq/2002-05/0281.html · Correção
• http://securityfocus.com/bid/4898 · Correção
• http://freebsd.org/cgi/query-pr.cgi?pr=38716 · Nota