Public SourceMage Discussion List

[evraire AT tuwg.com]

"Security researchers have discovered a serious vulnerability that may be 
present in many Ethernet device drivers that is causing the devices to 
broadcast sensitive information over networks.
[...]
researchers [...] have discovered that many drivers instead pad packets with 
data from previously transmitted Ethernet frames. This results in the device 
sending out sensitive information to other machines on the same Ethernet 
network.
[...]
The Linux, NetBSD and Microsoft Windows operating systems are known to have 
vulnerable link layer implementations, and it is extremely likely that other 
operating systems are also affected."

CERT link: http://www.kb.cert.org/vuls/id/412115




--------------------------------------------------------------
Message sent via Toad-One
http://webmail.toad-one.org

.