Lucene search

K
cve[email protected]CVE-2002-1976
HistoryJun 28, 2005 - 4:00 a.m.

CVE-2002-1976

2005-06-2804:00:00
web.nvd.nist.gov
23
cve
ifconfig
linux
promiscuous mode
packet_mr_promisc
libpcap
network security
nvd

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

6.5 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

25.0%

ifconfig, when used on the Linux kernel 2.2 and later, does not report when the network interface is in promiscuous mode if it was put in promiscuous mode using PACKET_MR_PROMISC, which could allow attackers to sniff the network without detection, as demonstrated using libpcap.

Affected configurations

NVD
Node
linuxlinux_kernelMatch2.2.0
OR
linuxlinux_kernelMatch2.2.1
OR
linuxlinux_kernelMatch2.2.2
OR
linuxlinux_kernelMatch2.2.3
OR
linuxlinux_kernelMatch2.2.4
OR
linuxlinux_kernelMatch2.2.5
OR
linuxlinux_kernelMatch2.2.6
OR
linuxlinux_kernelMatch2.2.7
OR
linuxlinux_kernelMatch2.2.8
OR
linuxlinux_kernelMatch2.2.9
OR
linuxlinux_kernelMatch2.2.10
OR
linuxlinux_kernelMatch2.2.11
OR
linuxlinux_kernelMatch2.2.12
OR
linuxlinux_kernelMatch2.2.13
OR
linuxlinux_kernelMatch2.2.14
OR
linuxlinux_kernelMatch2.2.15
OR
linuxlinux_kernelMatch2.2.16
OR
linuxlinux_kernelMatch2.2.17
OR
linuxlinux_kernelMatch2.2.18
OR
linuxlinux_kernelMatch2.2.19
OR
linuxlinux_kernelMatch2.2.20
OR
linuxlinux_kernelMatch2.3.0
OR
linuxlinux_kernelMatch2.3.99
OR
linuxlinux_kernelMatch2.4.0
OR
linuxlinux_kernelMatch2.4.1
OR
linuxlinux_kernelMatch2.4.2
OR
linuxlinux_kernelMatch2.4.3
OR
linuxlinux_kernelMatch2.4.4
OR
linuxlinux_kernelMatch2.4.5
OR
linuxlinux_kernelMatch2.4.6
OR
linuxlinux_kernelMatch2.4.7
OR
linuxlinux_kernelMatch2.4.8
OR
linuxlinux_kernelMatch2.4.9
OR
linuxlinux_kernelMatch2.4.10
OR
linuxlinux_kernelMatch2.4.11
OR
linuxlinux_kernelMatch2.4.12
OR
linuxlinux_kernelMatch2.4.13
OR
linuxlinux_kernelMatch2.4.14
OR
linuxlinux_kernelMatch2.4.15
OR
linuxlinux_kernelMatch2.4.16
OR
linuxlinux_kernelMatch2.4.17
OR
linuxlinux_kernelMatch2.4.18
OR
linuxlinux_kernelMatch2.4.18x86
OR
linuxlinux_kernelMatch2.4.19pre1
OR
linuxlinux_kernelMatch2.4.19pre2
OR
linuxlinux_kernelMatch2.4.19pre3
OR
linuxlinux_kernelMatch2.4.19pre4
OR
linuxlinux_kernelMatch2.4.19pre5
OR
linuxlinux_kernelMatch2.4.19pre6

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

6.5 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

25.0%

Related for CVE-2002-1976