CVEvulnerability

CVE-2002-1976

2.1 LOW Published 2002-12-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2002-12-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N

Description

ifconfig, when used on the Linux kernel 2.2 and later, does not report when the network interface is in promiscuous mode if it was put in promiscuous mode using PACKET_MR_PROMISC, which could allow attackers to sniff the network without detection, as demonstrated using libpcap.

Affected configurations

• linux linux kernel 2.2.0 • linux linux kernel 2.2.1 • linux linux kernel 2.2.2 • linux linux kernel 2.2.3 • linux linux kernel 2.2.4 • linux linux kernel 2.2.5 • linux linux kernel 2.2.6 • linux linux kernel 2.2.7 • linux linux kernel 2.2.8 • linux linux kernel 2.2.9 • linux linux kernel 2.2.10 • linux linux kernel 2.2.11 • linux linux kernel 2.2.12 • linux linux kernel 2.2.13 • linux linux kernel 2.2.14 • linux linux kernel 2.2.15 • linux linux kernel 2.2.16 • linux linux kernel 2.2.17 • linux linux kernel 2.2.18 • linux linux kernel 2.2.19 • linux linux kernel 2.2.20 • linux linux kernel 2.3.0 • linux linux kernel 2.3.99 • linux linux kernel 2.4.0 • linux linux kernel 2.4.1 • linux linux kernel 2.4.2 • linux linux kernel 2.4.3 • linux linux kernel 2.4.4 • linux linux kernel 2.4.5 • linux linux kernel 2.4.6 • linux linux kernel 2.4.7 • linux linux kernel 2.4.8 • linux linux kernel 2.4.9 • linux linux kernel 2.4.10 • linux linux kernel 2.4.11 • linux linux kernel 2.4.12 • linux linux kernel 2.4.13 • linux linux kernel 2.4.14 • linux linux kernel 2.4.15 • linux linux kernel 2.4.16 • linux linux kernel 2.4.17 • linux linux kernel 2.4.18 • linux linux kernel 2.4.19

Related

Referenced by CWE · observed example (1)

  • CWE-439 Behavioral Change in New Version or Environment weakness

References