CVE-2002-1976 ifconfig, when used on the Linux kernel 2.2 and later, does not report when the network interface is in promiscuous mode if it was put in promiscuous mode using PACKET_MR_PROMISC, which could allow at...
LowCVSS 2.1
EPSS 0.40%
- Published
- Updated
- Exploit status
- No public exploit known
Description
ifconfig, when used on the Linux kernel 2.2 and later, does not report when the network interface is in promiscuous mode if it was put in promiscuous mode using PACKET_MR_PROMISC, which could allow attackers to sniff the network without detection, as demonstrated using libpcap.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux kernel | = 2.2.0 | No fix listed |
| Linux kernel | = 2.2.1 | No fix listed |
| Linux kernel | = 2.2.2 | No fix listed |
| Linux kernel | = 2.2.3 | No fix listed |
| Linux kernel | = 2.2.4 | No fix listed |
| Linux kernel | = 2.2.5 | No fix listed |
| Linux kernel | = 2.2.6 | No fix listed |
| Linux kernel | = 2.2.7 | No fix listed |
| Linux kernel | = 2.2.8 | No fix listed |
| Linux kernel | = 2.2.9 | No fix listed |
| Linux kernel | = 2.2.10 | No fix listed |
| Linux kernel | = 2.2.11 | No fix listed |
| Linux kernel | = 2.2.12 | No fix listed |
| Linux kernel | = 2.2.13 | No fix listed |
| Linux kernel | = 2.2.14 | No fix listed |
| Linux kernel | = 2.2.15 | No fix listed |
| Linux kernel | = 2.2.16 | No fix listed |
| Linux kernel | = 2.2.17 | No fix listed |
| Linux kernel | = 2.2.18 | No fix listed |
| Linux kernel | = 2.2.19 | No fix listed |
| Linux kernel | = 2.2.20 | No fix listed |
| Linux kernel | = 2.3.0 | No fix listed |
| Linux kernel | = 2.3.99 | No fix listed |
| Linux kernel | = 2.4.0 | No fix listed |
| Linux kernel | = 2.4.1 | No fix listed |
Show 38 more
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux kernel | = 2.4.2 | No fix listed |
| Linux kernel | = 2.4.3 | No fix listed |
| Linux kernel | = 2.4.4 | No fix listed |
| Linux kernel | = 2.4.5 | No fix listed |
| Linux kernel | = 2.4.6 | No fix listed |
| Linux kernel | = 2.4.7 | No fix listed |
| Linux kernel | = 2.4.8 | No fix listed |
| Linux kernel | = 2.4.9 | No fix listed |
| Linux kernel | = 2.4.10 | No fix listed |
| Linux kernel | = 2.4.11 | No fix listed |
| Linux kernel | = 2.4.12 | No fix listed |
| Linux kernel | = 2.4.13 | No fix listed |
| Linux kernel | = 2.4.14 | No fix listed |
| Linux kernel | = 2.4.15 | No fix listed |
| Linux kernel | = 2.4.16 | No fix listed |
| Linux kernel | = 2.4.17 | No fix listed |
| Linux kernel | = 2.4.18 | No fix listed |
| Linux kernel | = 2.4.19-pre1 | No fix listed |
| Linux kernel | = 2.4.19-pre2 | No fix listed |
| Linux kernel | = 2.4.19-pre3 | No fix listed |
| Linux kernel | = 2.4.19-pre4 | No fix listed |
| Linux kernel | = 2.4.19-pre5 | No fix listed |
| Linux kernel | = 2.4.19-pre6 | No fix listed |
| debian/net-tools(Debian:12) | All versions | No fix listed |
| debian/net-tools(Debian:12) | = 2.10-0.1 | No fix listed |
| debian/net-tools(Debian:12) | = 2.10-0.1+deb12u1 | No fix listed |
| debian/net-tools(Debian:12) | = 2.10-0.1+deb12u2 | No fix listed |
| debian/net-tools(Debian:12) | = 2.10-1 | No fix listed |
| debian/net-tools(Debian:12) | = 2.10-1.1 | No fix listed |
| debian/net-tools(Debian:12) | = 2.10-1.2 | No fix listed |
| debian/net-tools(Debian:12) | = 2.10-1.3 | No fix listed |
| debian/net-tools(Debian:12) | = 2.10-2 | No fix listed |
| debian/net-tools(Debian:13) | All versions | No fix listed |
| debian/net-tools(Debian:13) | = 2.10-1.3 | No fix listed |
| debian/net-tools(Debian:13) | = 2.10-2 | No fix listed |
| debian/net-tools(Debian:14) | All versions | No fix listed |
| debian/net-tools(Debian:14) | = 2.10-1.3 | No fix listed |
| debian/net-tools(Debian:14) | = 2.10-2 | No fix listed |
References
- 20020724 Interface promiscuity obscurity in Linux mailing-list
- 20020724 Re: Interface promiscuity obscurity in Linux mailing-list
- 20020725 Re: Interface promiscuity obscurity in Linux mailing-list
- linux-ifconfig-promiscuous-mode(9676) vdb-entry
- 5304 patch vdb-entry
- Debian Security Tracker CVE-2002-1976 vendor-advisory