[SM-Discuss] security alert: ethernet drivers
Sergey A. Lipnevich
sergeyli at pisem.net
Tue Jan 7 11:05:03 EST 2003
Please discontinue all Ethernet communications, destroy all Ethernet
hardware, and sue Bob Metcalfe for damages ;-). Use pigeons in the meantime.
evraire at tuwg.com wrote:
>"Security researchers have discovered a serious vulnerability that may be present in many Ethernet device drivers that is causing the devices to broadcast sensitive information over networks.
>[...]
>researchers [...] have discovered that many drivers instead pad packets with data from previously transmitted Ethernet frames. This results in the device sending out sensitive information to other machines on the same Ethernet network.
>[...]
>The Linux, NetBSD and Microsoft Windows operating systems are known to have vulnerable link layer implementations, and it is extremely likely that other operating systems are also affected."
>
>CERT link: http://www.kb.cert.org/vuls/id/412115
>
>
>
>
>--------------------------------------------------------------
>Message sent via Toad-One
>http://webmail.toad-one.org
>
>.
>_______________________________________________
>SM-Discuss mailing list
>SM-Discuss at lists.ibiblio.org
>http://lists.ibiblio.org/mailman/listinfo/sm-discuss
>
>
>
More information about the SM-Discuss
mailing list