PT-2001-1176 · Recourse · Recourse Mantrap

Published 2001-01-09 · Updated 2017-10-10 · CVE-2000-1140

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Recourse ManTrap version 1.6

Description The issue allows attackers to determine if they are in a honeypot system by comparing the results from kill commands with the process listing in the /proc filesystem, due to the software not properly hiding processes.

Recommendations For Recourse ManTrap version 1.6, consider implementing proper process hiding mechanisms to prevent attackers from identifying the honeypot system. As a temporary workaround, restrict access to the /proc filesystem to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2000-1140

Affected Products

Recourse Mantrap

References · 6

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2000-11/0041.html · Exploit
• 🔥 http://securityfocus.com/bid/1908 · Exploit
• 🔥 https://exploit-db.com/exploits/20380 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-1140 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2000-11/0100.html · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5473 · Note