2.1low
CVE-2002-1976
ifconfig, when used on the Linux kernel 2.2 and later, does not report when the network interface is in promiscuous mode if it was put in p…
Published 23 y ago · modified 4 mo ago · JSON
CVSS
2.1
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.4%
percentile 35%
Public exploits
0
none known
Summary
ifconfig, when used on the Linux kernel 2.2 and later, does not report when the network interface is in promiscuous mode if it was put in promiscuous mode using PACKET_MR_PROMISC, which could allow attackers to sniff the network without detection, as demonstrated using libpcap.
Exploit prediction (EPSS)
0.40% probability of exploitation in the next 30 days, higher than 35% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 2.1 | AV:L/AC:L/Au:N/C:P/I:N/A:N |
Classification
- Technology feeds
- Linux kernel (RSS, critical only)
References
- archives.neohapsis.com /archives/bugtraq/2002-07/0279.html · mailing-list, x_refsource_BUGTRAQ, x_transferred
- online.securityfocus.com /archive/1/284142 · mailing-list, x_refsource_BUGTRAQ, x_transferred
- securityfocus.com /bid/5304 · vdb-entry, x_refsource_BID, x_transferred
- online.securityfocus.com /archive/1/284257 · mailing-list, x_refsource_BUGTRAQ, x_transferred
- iss.net /security_center/static/9676.php · vdb-entry, x_refsource_XF, x_transferred
Sources
- CVE List: CVE-2002-1976
- NVD: CVE-2002-1976
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.