Upstream information

CVE-2002-0510 at MITRE

Description

The UDP implementation in Linux 2.4.x kernels keeps the IP Identification field at 0 for all non-fragmented packets, which could allow remote attackers to determine that a target system is running Linux.

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having moderate severity.

CVSS v2 Scores
  National Vulnerability Database
Base Score 5
Vector AV:N/AC:L/Au:N/C:P/I:N/A:N
Access Vector Network
Access Complexity Low
Authentication None
Confidentiality Impact Partial
Integrity Impact None
Availability Impact None

Note from the SUSE Security Team

SUSE does not consider this a security issue, as the information gained (Linux is running here) is very limited and could also gained by various other means. We are not planning to fix this issue.

SUSE Bugzilla entry: 744345 [RESOLVED / INVALID]

No SUSE Security Announcements cross referenced.

SUSE Timeline for this CVE

CVE page created: Fri Jun 28 00:23:33 2013
CVE page last modified: Fri Jul 19 11:09:59 2024