Skip to Content.
Sympa Menu

sm-discuss - Re: [SM-Discuss] security alert: ethernet drivers

sm-discuss AT lists.ibiblio.org

Subject: Public SourceMage Discussion List

List archive

Chronological Thread  
  • From: "Sergey A. Lipnevich" <sergeyli AT pisem.net>
  • To: sm-discuss AT lists.ibiblio.org
  • Subject: Re: [SM-Discuss] security alert: ethernet drivers
  • Date: Tue, 07 Jan 2003 11:05:03 -0500

Please discontinue all Ethernet communications, destroy all Ethernet hardware, and sue Bob Metcalfe for damages ;-). Use pigeons in the meantime.

evraire AT tuwg.com wrote:

"Security researchers have discovered a serious vulnerability that may be
present in many Ethernet device drivers that is causing the devices to broadcast
sensitive information over networks.
[...]
researchers [...] have discovered that many drivers instead pad packets with
data from previously transmitted Ethernet frames. This results in the device
sending out sensitive information to other machines on the same Ethernet
network.
[...]
The Linux, NetBSD and Microsoft Windows operating systems are known to have
vulnerable link layer implementations, and it is extremely likely that other
operating systems are also affected."

CERT link: http://www.kb.cert.org/vuls/id/412115




--------------------------------------------------------------
Message sent via Toad-One
http://webmail.toad-one.org

.
_______________________________________________
SM-Discuss mailing list
SM-Discuss AT lists.ibiblio.org
http://lists.ibiblio.org/mailman/listinfo/sm-discuss







Archive powered by MHonArc 2.6.24.

Top of Page