PT-2002-2770 · Fragroute+2 · Fragroute+1

Published 2002-12-31 · Updated 2008-09-05 · CVE-2002-2049

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Dsniff version 2.3 fragroute version 1.2 fragrouter version 1.6

Description The issue concerns a backdoor in the specified software versions, which allows remote attackers to access the system. This backdoor was introduced when the software was downloaded from monkey.org on May 17, 2002.

Recommendations For Dsniff version 2.3, avoid using the version downloaded from monkey.org on May 17, 2002, to prevent potential backdoor exploitation. For fragroute version 1.2, refrain from using the version downloaded from monkey.org on May 17, 2002, until a clean version can be obtained. For fragrouter version 1.6, do not use the version downloaded from monkey.org on May 17, 2002, as it may contain a backdoor. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2002-2049

Affected Products

Dsniff

Fragroute

References · 5

• http://iss.net/security_center/static/9272.php · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2002-2049 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2002-05/0281.html · Patch
• http://securityfocus.com/bid/4898 · Patch
• http://freebsd.org/cgi/query-pr.cgi?pr=38716 · Note