PT-2003-1096 · Red Hat+1 · Red Hat+1
Publicado
2003-05-22
·
Atualizado
2017-10-11
·
CVE-2003-0552
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Red Hat Linux kernel versions 2.4.20
Linux kernel versions 2.4.x
Description
The issue affects the Linux kernel, allowing remote attackers to exploit vulnerabilities that may lead to a breach of confidentiality, integrity, and availability of protected information. This can be achieved through forged packets with source addresses identical to the target, potentially spoofing the bridge Forwarding table. The exploitation of these vulnerabilities can be carried out remotely.
Recommendations
For Red Hat Linux kernel version 2.4.20, consider updating to a newer version to mitigate the risk.
For Linux kernel version 2.4.x, restrict access to the bridge Forwarding table to minimize the risk of exploitation.
As a temporary workaround, consider disabling remote access to the kernel until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Linux Kernel
Red Hat