SB2002072601 - Improper removal of sensitive information before storage or transfer in Linux kernel

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2002072601

SB2002072601 - Improper removal of sensitive information before storage or transfer in Linux kernel

Published: July 26, 2002

Security Bulletin ID SB2002072601
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Information disclosure

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Improper removal of sensitive information before storage or transfer (CVE-ID: CVE-2002-0704)

CWE-ID: CWE-212 - Improper Removal of Sensitive Information Before Storage or Transfer

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear


The vulnerability allows a remote non-authenticated attacker to gain access to sensitive information.

The Network Address Translation (NAT) capability for Netfilter ('iptables') 1.2.6a and earlier leaks translated IP addresses in ICMP error messages.


Remediation

Install update from vendor's website.

References