CVE-2002-2185
The Internet Group Management Protocol (IGMP) allows local users to cause a denial of service via an IGMP membership report to a target's Ethernet address instead of the Multicast group address, which causes the target to stop sending reports to the router and effectively disconnect the group from the network.
- Score
- CVSS 2.0 4.9 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2002-12-31
- Last modified
- 2024-08-08
Affected products
- Debian Linux (Debian)
- Mandrake Linux (Mandrakesoft)
- Windows 98 (Microsoft)
- Windows 98se (Microsoft)
- Windows Xp (Microsoft)
- Enterprise Linux (Redhat)
- Enterprise Linux Desktop (Redhat)
- Linux (Redhat)
- Linux Advanced Workstation (Redhat)
- Irix (Sgi)
- Suse Linux (Suse)
References
- http://online.securityfocus.com/archive/1/276968
- http://secunia.com/advisories/18510
- http://secunia.com/advisories/18562
- http://secunia.com/advisories/18684
- http://www.cs.ucsb.edu/~krishna/igmp_dos/
- http://www.redhat.com/support/errata/RHSA-2006-0101.html
- http://www.redhat.com/support/errata/RHSA-2006-0140.html
- http://www.redhat.com/support/errata/RHSA-2006-0190.html
- http://www.redhat.com/support/errata/RHSA-2006-0191.html
- http://www.securityfocus.com/archive/1/427980/100/0/threaded
- http://www.securityfocus.com/archive/1/427981/100/0/threaded
- http://www.securityfocus.com/archive/1/428028/100/0/threaded
- http://www.securityfocus.com/archive/1/428058/100/0/threaded
- http://www.securityfocus.com/bid/5020
- https://exchange.xforce.ibmcloud.com/vulnerabilities/9436
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10736
