sm-discuss AT lists.ibiblio.org
Subject: Public SourceMage Discussion List
List archive
- From: "Sergey A. Lipnevich" <sergeyli AT pisem.net>
- To: sm-discuss AT lists.ibiblio.org
- Subject: Re: [SM-Discuss] security alert: ethernet drivers
- Date: Tue, 07 Jan 2003 11:05:03 -0500
Please discontinue all Ethernet communications, destroy all Ethernet hardware, and sue Bob Metcalfe for damages ;-). Use pigeons in the meantime.
evraire AT tuwg.com wrote:
"Security researchers have discovered a serious vulnerability that may be
present in many Ethernet device drivers that is causing the devices to broadcast
sensitive information over networks.
[...]
researchers [...] have discovered that many drivers instead pad packets with
data from previously transmitted Ethernet frames. This results in the device
sending out sensitive information to other machines on the same Ethernet
network.
[...]
The Linux, NetBSD and Microsoft Windows operating systems are known to have
vulnerable link layer implementations, and it is extremely likely that other
operating systems are also affected."
CERT link: http://www.kb.cert.org/vuls/id/412115
--------------------------------------------------------------
Message sent via Toad-One
http://webmail.toad-one.org
.
_______________________________________________
SM-Discuss mailing list
SM-Discuss AT lists.ibiblio.org
http://lists.ibiblio.org/mailman/listinfo/sm-discuss
-
[SM-Discuss] security alert: ethernet drivers,
evraire, 01/07/2003
-
Re: [SM-Discuss] security alert: ethernet drivers,
Sergey A. Lipnevich, 01/07/2003
-
Re: [SM-Discuss] security alert: ethernet drivers,
M.L., 01/07/2003
-
Re: [SM-Discuss] security alert: ethernet drivers,
M.L., 01/07/2003
-
Re: [SM-Discuss] security alert: ethernet drivers,
f0xy, 01/07/2003
- Re: [SM-Discuss] security alert: ethernet drivers, Sergey A. Lipnevich, 01/07/2003
-
Re: [SM-Discuss] security alert: ethernet drivers,
f0xy, 01/07/2003
-
Re: [SM-Discuss] security alert: ethernet drivers,
M.L., 01/07/2003
-
Re: [SM-Discuss] security alert: ethernet drivers,
M.L., 01/07/2003
-
Re: [SM-Discuss] security alert: ethernet drivers,
Sergey A. Lipnevich, 01/07/2003
Archive powered by MHonArc 2.6.24.