CVE

Id
4961  
CVE No.
CVE-2002-0570  
Status
Candidate  
Description
The encrypted loop device in Linux kernel 2.4.10 and earlier does not authenticate the entity that is encrypting data, which allows local users to modify encrypted data without knowing the key.  
Phase
Proposed (20020611)  
Votes
ACCEPT(3) Alderson, Cole, Frech | MODIFY(1) Foat | NOOP(2) Cox, Wall  
Comments
Foat> A local user can not modify the data. The user needs to root the box | first or at least get UNIX permission to write to the encrypted file system. | This is different than being a local user. | CHANGE> [Cox changed vote from REVIEWING to NOOP]  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
25556 4961 CVE-2002-0570 BUGTRAQ:20020102 Vulnerability in encrypted loop device for linux  View
25557 4961 CVE-2002-0570 URL:http://archives.neohapsis.com/archives/bugtraq/2002-01/0010.html  View
25558 4961 CVE-2002-0570 BID:3775  View
25559 4961 CVE-2002-0570 URL:http://www.securityfocus.com/bid/3775  View
25560 4961 CVE-2002-0570 XF:linux-loop-device-encryption(7769)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63676 JVNDB-2002-000003 Linux kernel の CBC 暗号化処理におけるリプレイ攻撃を受ける脆弱性 Linux の loop デバイスを介した暗号化ファイルシステムは、ファイルシステムをブロック暗号化する際、全て同じキーが使われてしまうため、リプレイ攻撃を受ける脆弱性が存在します。 CVE-2002-0570 4961 2.1 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000003.html  View