PT-2003-1096 · Red Hat+1 · Red Hat+1
Published
2003-05-22
·
Updated
2017-10-11
·
CVE-2003-0552
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Red Hat Linux kernel versions 2.4.20
Linux kernel versions 2.4.x
Description
The issue affects the Linux kernel, allowing remote attackers to exploit vulnerabilities that may lead to a breach of confidentiality, integrity, and availability of protected information. This can be achieved through forged packets with source addresses identical to the target, potentially spoofing the bridge Forwarding table. The exploitation of these vulnerabilities can be carried out remotely.
Recommendations
For Red Hat Linux kernel version 2.4.20, consider updating to a newer version to mitigate the risk.
For Linux kernel version 2.4.x, restrict access to the bridge Forwarding table to minimize the risk of exploitation.
As a temporary workaround, consider disabling remote access to the kernel until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel
Red Hat