PT-2002-2697 · Linux+1 · Linux Kernel+1

Published 2002-12-31 · Updated 2008-09-05 · CVE-2002-1976

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions 2.2 and later

Description The issue allows attackers to sniff the network without detection when the network interface is in promiscuous mode, set using PACKET MR PROMISC. This is because ifconfig does not report the promiscuous mode status in such cases.

Recommendations For Linux kernel versions 2.2 and later, consider using alternative methods to detect promiscuous mode, such as checking the interface settings directly, until a fix is available. As a temporary workaround, consider monitoring network traffic closely to detect potential sniffing attempts.

Fix

Related Identifiers

CVE-2002-1976

ECHO-35AF-8DFC-9FEE

Affected Products

Debian

Linux Kernel

References · 9

• http://securityfocus.com/bid/5304 · Patch
• https://security-tracker.debian.org/tracker/CVE-2002-1976 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-1976 · Security Note
• https://osv.dev/vulnerability/CVE-2002-1976 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2002-1976 · Vendor Advisory
• http://online.securityfocus.com/archive/1/284257 · Note
• http://archives.neohapsis.com/archives/bugtraq/2002-07/0279.html · Note
• http://online.securityfocus.com/archive/1/284142 · Note
• http://iss.net/security_center/static/9676.php · Note