Bug 402023

Summary:	The Linux kernel, when using IPv6, allows remote attackers to determine whether a host is sniffing the network (CVE-2010-4563)
Product:	Gentoo Security	Reporter:	Viorel Tabara <gentoo>
Component:	Kernel	Assignee:	Gentoo Security <security>
Status:	UNCONFIRMED ---
Severity:	normal
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4563
Whiteboard:	B3[upstream]
Package list:		Runtime testing required:	---

Description Viorel Tabara 2012-02-03 04:34:34 UTC

The Linux kernel, when using IPv6, allows remote attackers to determine
whether a host is sniffing the network by sending an ICMPv6 Echo
Request to a multicast address and determining whether an Echo Reply is
sent, as demonstrated by thcping.


Reproducible: Always