Lucene search
HistoryAug 27, 2003 - 4:00 a.m.
CVE-2003-0550
stp protocol
linux 2.4.x
security
bridge topology
cve-2003-0550
nvd
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
6.1 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
60.3%
The STP protocol, as enabled in Linux 2.4.x, does not provide sufficient security by design, which allows attackers to modify the bridge topology.
Affected configurations
Node
redhatlinuxMatch2.4.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| redhat:linux | redhat linux | eq | 2.4.2 |
Related
nvd
nvd
CVE-2003-0550
2003-08-27 04:00:00
cvelist
cvelist
CVE-2003-0550
2003-07-25 04:00:00
redhat
redhat
(RHSA-2003:239) kernel security update
2003-08-21 00:00:00
(RHSA-2003:198) kernel security update
2003-08-21 00:00:00
nessus
nessus
RHEL 2.1 : kernel (RHSA-2003:239)
2004-07-06 00:00:00
Debian DSA-358-4 : linux-kernel-2.4.18 - several vulnerabilities
2004-09-29 00:00:00
Debian DSA-423-1 : linux-kernel-2.4.17-ia64 - several vulnerabilities
2004-09-29 00:00:00
securityvulns
securityvulns
[RHSA-2003:238-01] Updated 2.4 kernel fixes vulnerabilities
2003-07-22 00:00:00
debian
debian
[SECURITY] [DSA-358-1] New kernel source and i386, alpha kernel images fix multiple vulnerabilities
2003-08-01 01:57:30
[SECURITY] [DSA 423-1] New Linux 2.4.17 packages fix several problems (ia64)
2004-01-15 07:49:42
[SECURITY] [DSA 423-1] New Linux 2.4.17 packages fix several problems (ia64)
2004-01-15 07:49:42
openvas
openvas
Debian Security Advisory DSA 358-1 (linux-kernel-i386, linux-kernel-alpha)
2008-01-17 00:00:00
Debian Security Advisory DSA 358-1 (linux-kernel-i386, linux-kernel-alpha)
2008-01-17 00:00:00
Debian Security Advisory DSA 423-1 (kernel-image-2.4.17-ia64)
2008-01-17 00:00:00
osv
osv
linux-kernel-2.4.18 - several vulnerabilities
2003-07-31 00:00:00
linux-kernel-2.4.17-ia64 - several vulnerabilities
2004-01-15 00:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
6.1 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
60.3%
Related for CVE-2003-0550