Every CVE Search/ Get API key

CVE-2002-1976

ifconfig, when used on the Linux kernel 2.2 and later, does not report when the network interface...

2.1 Low

ifconfig, when used on the Linux kernel 2.2 and later, does not report when the network interface is in promiscuous mode if it was put in promiscuous mode using PACKET_MR_PROMISC, which could allow attackers to sniff the network without detection, as demonstrated using libpcap.

Exploit likelihood

0.40%Down 0.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 2.1

ifconfig, when used on the Linux kernel 2.2 and later, does not report when the network interface is in promiscuous mode if it was put in promiscuous mode using PACKET_MR_PROMISC, which could allow attackers to sniff the network without detection, as demonstrated using libpcap.

Record
CVE-2002-1976
CVSS 2.0
2.1 LowAV:L/AC:L/Au:N/C:P/I:N/A:N
Updated
2026-11-02
CVE List No score

ifconfig, when used on the Linux kernel 2.2 and later, does not report when the network interface is in promiscuous mode if it was put in promiscuous mode using PACKET_MR_PROMISC, which could allow attackers to sniff the network without detection, as demonstrated using libpcap.

Record
CVE-2002-1976
Updated
2026-11-02
EUVDEUVD-2002-1955 No score

ifconfig, when used on the Linux kernel 2.2 and later, does not report when the network interface is in promiscuous mode if it was put in promiscuous mode using PACKET_MR_PROMISC, which could allow attackers to sniff the network without detection, as demonstrated using libpcap.

Record
EUVD-2002-1955
Updated
2026-11-03
GitHub AdvisoriesGHSA-rm24-8945-q3fx No score

ifconfig, when used on the Linux kernel 2.2 and later, does not report when the network interface...

ifconfig, when used on the Linux kernel 2.2 and later, does not report when the network interface is in promiscuous mode if it was put in promiscuous mode using PACKET_MR_PROMISC, which could allow attackers to sniff the network without detection, as demonstrated using libpcap.

Record
GHSA-rm24-8945-q3fx
Updated
2026-11-02
OSV No score

ifconfig, when used on the Linux kernel 2.2 and later, does not report when the network interface is in promiscuous mode if it was put in promiscuous mode using PACKET_MR_PROMISC, which could allow attackers to sniff the network without detection, as demonstrated using libpcap.

Record
CVE-2002-1976
Updated
2026-11-02
OSVDEBIAN-CVE-2002-1976 No score

ifconfig, when used on the Linux kernel 2.2 and later, does not report when the network interface is in promiscuous mode if it was put in promiscuous mode using PACKET_MR_PROMISC, which could allow attackers to sniff the network without detection, as demonstrated using libpcap.

Record
DEBIAN-CVE-2002-1976
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
net-tools
Debian:12
All versions, plus listed versions
2.10-0.12.10-0.1+deb12u12.10-0.1+deb12u22.10-12.10-1.12.10-1.22.10-1.32.10-2
None known
net-tools
Debian:13
All versions, plus listed versions
2.10-1.32.10-2
None known
net-tools
Debian:14
All versions, plus listed versions
2.10-1.32.10-2
None known

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2002-1976 is a low vulnerability (CVSS 2.1) in Linux Kernel, published December 31, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.40%, the 34th percentile. No source names a fixed version.

References

MoveEnter Open