CVE-2002-2185
First published: Tue Dec 31 2002(Updated: )
The Internet Group Management Protocol (IGMP) allows local users to cause a denial of service via an IGMP membership report to a target's Ethernet address instead of the Multicast group address, which causes the target to stop sending reports to the router and effectively disconnect the group from the network.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SGI IRIX | =6.5.16m | |
| SGI IRIX | =6.5.6 | |
| SGI IRIX | =6.5.17f | |
| SGI IRIX | =6.5.1 | |
| SGI IRIX | =6.5.14f | |
| SGI IRIX | =6.5.10 | |
| SGI IRIX | =6.5.12 | |
| SGI IRIX | =6.5.15f | |
| SGI IRIX | =6.5.18f | |
| SGI IRIX | =6.5.9 | |
| SGI IRIX | =6.5.16f | |
| SGI IRIX | =6.5.17m | |
| SGI IRIX | =6.5.14m | |
| SGI IRIX | =6.5.3 | |
| SGI IRIX | =6.5.8 | |
| SGI IRIX | =6.5.5 | |
| SGI IRIX | =6.5.4 | |
| SGI IRIX | =6.5.15m | |
| SGI IRIX | =6.5.11 | |
| SGI IRIX | =6.5.2 | |
| SGI IRIX | =6.5 | |
| SGI IRIX | =6.5.7 | |
| SGI IRIX | =6.5.18m | |
| SGI IRIX | =6.5.13 | |
| Red Hat Linux | =7.2 | |
| Debian GNU/Linux | =2.2 | |
| Red Hat Enterprise Linux | =4.0 | |
| Mandrake Linux | =8.2 | |
| SUSE Linux | =7.1 | |
| redhat enterprise Linux desktop | =3.0 | |
| Red Hat Linux | =6.2 | |
| Red Hat Linux Advanced Workstation | =2.1 | |
| SUSE Linux | =7.1-alpha | |
| Red Hat Enterprise Linux | =4.0 | |
| Red Hat Enterprise Linux | =3.0 | |
| Microsoft Windows XP | =gold | |
| Mandrake Linux | =8.1 | |
| Debian GNU/Linux | =2.2 | |
| Red Hat Linux | =7.1 | |
| SUSE Linux | =7.3 | |
| Microsoft Windows 98SE | ||
| SUSE Linux | =7.0 | |
| SUSE Linux | =6.4 | |
| SUSE Linux | =7.3 | |
| Red Hat Linux | =7.0 | |
| Mandrake Linux | =8.1 | |
| Red Hat Linux | =6.2 | |
| SUSE Linux | =7.0 | |
| SUSE Linux | =7.0 | |
| Red Hat Linux Advanced Workstation | =2.1 | |
| Mandrake Linux | =8.0 | |
| SUSE Linux | =8.0 | |
| Debian GNU/Linux | =2.2 | |
| Red Hat Linux | =7.1 | |
| SUSE Linux | =6.4 | |
| Red Hat Linux | =7.1 | |
| Red Hat Enterprise Linux | =4.0 | |
| Debian GNU/Linux | =2.2 | |
| Red Hat Enterprise Linux | =3.0 | |
| Microsoft Windows XP | ||
| SUSE Linux | =7.0-alpha | |
| Red Hat Linux | =7.0 | |
| Red Hat Linux | =7.3 | |
| Red Hat Linux | =6.2 | |
| Red Hat Enterprise Linux | =3.0 | |
| SUSE Linux | =7.1 | |
| redhat enterprise Linux desktop | =4.0 | |
| SUSE Linux | =6.4-alpha | |
| Mandrake Linux | =8.0 | |
| Microsoft Windows 98 | =gold | |
| Red Hat Linux | =7.0 | |
| SUSE Linux | =7.2 | |
| SUSE Linux | =7.3 | |
| Red Hat Linux | =7.2 | |
| Debian GNU/Linux | =2.2 | |
| SUSE Linux | =7.1 | |
| Debian GNU/Linux | =2.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://online.securityfocus.com/archive/1/276968
- http://www.cs.ucsb.edu/~krishna/igmp_dos/
- http://www.securityfocus.com/bid/5020
- http://www.redhat.com/support/errata/RHSA-2006-0101.html
- http://www.redhat.com/support/errata/RHSA-2006-0140.html
- http://secunia.com/advisories/18510
- http://secunia.com/advisories/18562
- http://www.redhat.com/support/errata/RHSA-2006-0190.html
- http://www.redhat.com/support/errata/RHSA-2006-0191.html
- http://secunia.com/advisories/18684
- https://exchange.xforce.ibmcloud.com/vulnerabilities/9436
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10736
- http://www.securityfocus.com/archive/1/428058/100/0/threaded
- http://www.securityfocus.com/archive/1/428028/100/0/threaded
- http://www.securityfocus.com/archive/1/427981/100/0/threaded
- http://www.securityfocus.com/archive/1/427980/100/0/threaded
Frequently Asked Questions
What is the severity of CVE-2002-2185?
CVE-2002-2185 has a moderate severity level, enabling a denial of service through IGMP membership reports.
How do I fix CVE-2002-2185?
To mitigate CVE-2002-2185, ensure that your network devices are configured to filter or block invalid IGMP messages.
Which systems are affected by CVE-2002-2185?
CVE-2002-2185 affects several versions of SGI IRIX, Red Hat Linux, and SUSE Linux among others.
What is the impact of CVE-2002-2185?
The impact of CVE-2002-2185 is that it can cause a denial of service, effectively disconnecting multicast groups from the router.
Can CVE-2002-2185 be exploited remotely?
Yes, CVE-2002-2185 can be exploited locally by users to disrupt network communication.
- agent/references
- agent/type
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/remedy
- agent/weakness
- agent/author
- agent/last-modified-date
- agent/event
- agent/description
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/sgi
- canonical/sgi irix
- version/sgi irix/6.5.16m
- version/sgi irix/6.5.6
- version/sgi irix/6.5.17f
- version/sgi irix/6.5.1
- version/sgi irix/6.5.14f
- version/sgi irix/6.5.10
- version/sgi irix/6.5.12
- version/sgi irix/6.5.15f
- version/sgi irix/6.5.18f
- version/sgi irix/6.5.9
- version/sgi irix/6.5.16f
- version/sgi irix/6.5.17m
- version/sgi irix/6.5.14m
- version/sgi irix/6.5.3
- version/sgi irix/6.5.8
- version/sgi irix/6.5.5
- version/sgi irix/6.5.4
- version/sgi irix/6.5.15m
- version/sgi irix/6.5.11
- version/sgi irix/6.5.2
- version/sgi irix/6.5
- version/sgi irix/6.5.7
- version/sgi irix/6.5.18m
- version/sgi irix/6.5.13
- vendor/redhat
- canonical/red hat linux
- version/red hat linux/7.2
- vendor/debian
- canonical/debian gnu/linux
- version/debian gnu/linux/2.2
- canonical/red hat enterprise linux
- version/red hat enterprise linux/4.0
- vendor/mandrakesoft
- canonical/mandrake linux
- version/mandrake linux/8.2
- vendor/suse
- canonical/suse linux
- version/suse linux/7.1
- canonical/redhat enterprise linux desktop
- version/redhat enterprise linux desktop/3.0
- version/red hat linux/6.2
- canonical/red hat linux advanced workstation
- version/red hat linux advanced workstation/2.1
- version/suse linux/7.1-alpha
- version/red hat enterprise linux/3.0
- vendor/microsoft
- canonical/microsoft windows xp
- version/microsoft windows xp/gold
- version/mandrake linux/8.1
- version/red hat linux/7.1
- version/suse linux/7.3
- canonical/microsoft windows 98se
- version/suse linux/7.0
- version/suse linux/6.4
- version/red hat linux/7.0
- version/mandrake linux/8.0
- version/suse linux/8.0
- version/suse linux/7.0-alpha
- version/red hat linux/7.3
- version/redhat enterprise linux desktop/4.0
- version/suse linux/6.4-alpha
- canonical/microsoft windows 98
- version/microsoft windows 98/gold
- version/suse linux/7.2