Description
ifconfig, when used on the Linux kernel 2.2 and later, does not report when the network interface is in promiscuous mode if it was put in promiscuous mode using PACKET_MR_PROMISC, which could allow attackers to sniff the network without detection, as demonstrated using libpcap.
References (5)
Core 5
Core References
Third Party Advisory mailing-list
x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2002-07/0279.html
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://online.securityfocus.com/archive/1/284142
Patch vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/5304
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://online.securityfocus.com/archive/1/284257
Third Party Advisory vdb-entry
x_refsource_xf
http://www.iss.net/security_center/static/9676.php
Scores
EPSS
0.0040
EPSS Percentile
33.6%
Details
Status
published
Products (43)
linux/linux_kernel
2.2.0
linux/linux_kernel
2.2.1
linux/linux_kernel
2.2.2
linux/linux_kernel
2.2.3
linux/linux_kernel
2.2.4
linux/linux_kernel
2.2.5
linux/linux_kernel
2.2.6
linux/linux_kernel
2.2.7
linux/linux_kernel
2.2.8
linux/linux_kernel
2.2.9
... and 33 more
Published
Dec 31, 2002
Tracked Since
Feb 18, 2026