Back
CVE-2002-1976
ifconfig, when used on the Linux kernel 2.2 and later, does not report when the network interface is in promiscuous mode if it was put in…
Low2.1EPSS 0.40%
- Published
- Updated
- Reserved
- Assigned by
- mitre
Description
ifconfig, when used on the Linux kernel 2.2 and later, does not report when the network interface is in promiscuous mode if it was put in promiscuous mode using PACKET_MR_PROMISC, which could allow attackers to sniff the network without detection, as demonstrated using libpcap.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 2.0 | Low2.1 | AV:L/AC:L/Au:N/C:P/I:N/A:N |
- EPSS (exploitation in 30 days)
- 0.40% · top 65% of all CVEs (2 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Low 2.1.
Weakness
- n/a
Affected products
n/a
- affected n/a
References (5)
- 20020724 Interface promiscuity obscurity in Linux (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
- 20020724 Re: Interface promiscuity obscurity in Linux (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
- 5304 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
- 20020725 Re: Interface promiscuity obscurity in Linux (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
- linux-ifconfig-promiscuous-mode(9676) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Record last updated .