Skip to Content.
Sympa Menu

sm-discuss - [SM-Discuss] security alert: ethernet drivers

sm-discuss AT lists.ibiblio.org

Subject: Public SourceMage Discussion List

List archive

Chronological Thread  
  • From: evraire AT tuwg.com
  • To: sm-discuss AT lists.ibiblio.org
  • Subject: [SM-Discuss] security alert: ethernet drivers
  • Date: 7 Jan 2003 15:58:59 -0000

"Security researchers have discovered a serious vulnerability that may be
present in many Ethernet device drivers that is causing the devices to
broadcast sensitive information over networks.
[...]
researchers [...] have discovered that many drivers instead pad packets with
data from previously transmitted Ethernet frames. This results in the device
sending out sensitive information to other machines on the same Ethernet
network.
[...]
The Linux, NetBSD and Microsoft Windows operating systems are known to have
vulnerable link layer implementations, and it is extremely likely that other
operating systems are also affected."

CERT link: http://www.kb.cert.org/vuls/id/412115




--------------------------------------------------------------
Message sent via Toad-One
http://webmail.toad-one.org

.




Archive powered by MHonArc 2.6.24.

Top of Page