Bug 132741 (CVE-2005-3272) - VUL-0: CVE-2005-3272: kernel: remote attackers can poison the bridge forwardiung table
Summary: VUL-0: CVE-2005-3272: kernel: remote attackers can poison the bridge forwardi...
Status: RESOLVED WONTFIX
Alias: CVE-2005-3272
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: Other Other
: P5 - None : Major
Target Milestone: ---
Assignee: Olaf Kirch
QA Contact: Security Team bot
URL:
Whiteboard: CVE-2005-3272: CVSS v2 Base Score: 5....
Keywords:
Depends on:
Blocks:
 
Reported: 2005-11-08 16:24 UTC by Marcus Meissner
Modified: 2021-11-22 10:32 UTC (History)
1 user (show)

See Also:
Found By: Other
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Marcus Meissner 2005-11-08 16:24:20 UTC 
CVE-2005-3272

Linux kernel before 2.6.12 allows remote attackers to poison the bridge forwarding table using frames that have already been dropped by filtering, which can cause the bridge to forward spoofed packets.

http://linux.bkbits.net:8080/linux-2.6/cset@429a310bRFOXOmZvKaGXW8A5Qd9F1A
Comment 1 Marcus Meissner 2005-11-08 16:29:19 UTC 
code in sles9 looks different a bit, but I guess it is affected.

olaf, I think we need to fix this, do you agree?
Comment 2 Marcus Meissner 2005-11-09 09:36:32 UTC 
remote -> major
Comment 3 Olaf Kirch 2005-11-09 11:50:02 UTC 
Looking "a bit different" sure is an understatement. Backporting this
fix is not trivial at all. In fact doing so may require a partial backport
from 2.6.12 (at least the br_fdb_update function may need to be backported,
and that seems to pull in some additional stuff).

I am actually reluctant to include this change at this time in the
product release cycle. Such a change needs more testing.

Please comment.
Comment 4 Marcus Meissner 2005-11-09 13:04:29 UTC 
since this is affects the local lan this is not that problematic. (other ways of attacking the network are possible).

I guess we can leave out fixing for older products and just mark it fixed 
for the upcoming products.
Comment 5 Thomas Biege 2009-10-13 21:49:04 UTC 
CVE-2005-3272: CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:P/A:N)