CVE-2002-0570

The encrypted loop device in Linux kernel 2.4.10 and earlier does not authenticate the entity that is encrypting data, which allows local users to modify encrypted data without knowing the key.

Published: Jul 3, 2002
Updated: Apr 13, 2023
CVE: CVE-2002-0570
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 2.1
AV:L/AC:L/Au:N/C:N/I:P/A:N

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
linux / linux_kernel	2.4.15	2.4.15.x
linux / linux_kernel	2.2.10	2.2.10.x
linux / linux_kernel	2.4.11	2.4.11.x
linux / linux_kernel	2.2.13	2.2.13.x
linux / linux_kernel	2.2.0	2.2.0.x
linux / linux_kernel	2.2.6	2.2.6.x
linux / linux_kernel	2.4.12	2.4.12.x
linux / linux_kernel	2.4.13	2.4.13.x
linux / linux_kernel	2.2.18	2.2.18.x
linux / linux_kernel	2.2.3	2.2.3.x
linux / linux_kernel	2.4.17	2.4.17.x
linux / linux_kernel	2.2.2	2.2.2.x
linux / linux_kernel	2.2.5	2.2.5.x
linux / linux_kernel	2.4.7	2.4.7.x
linux / linux_kernel	2.2.8	2.2.8.x
linux / linux_kernel	2.4.9	2.4.9.x
linux / linux_kernel	2.2.7	2.2.7.x
linux / linux_kernel	2.2.16	2.2.16.x
linux / linux_kernel	2.2.1	2.2.1.x
linux / linux_kernel	2.2.12	2.2.12.x
linux / linux_kernel	2.4.10	2.4.10.x
linux / linux_kernel	2.4.0	2.4.0.x
linux / linux_kernel	2.4.2	2.4.2.x
linux / linux_kernel	2.4.16	2.4.16.x
linux / linux_kernel	2.4.8	2.4.8.x
linux / linux_kernel	2.4.14	2.4.14.x
linux / linux_kernel	2.2.19	2.2.19.x
linux / linux_kernel	2.2.20	2.2.20.x
linux / linux_kernel	2.4.5	2.4.5.x
linux / linux_kernel	2.2.15	2.2.15.x
linux / linux_kernel	2.2.4	2.2.4.x
linux / linux_kernel	2.4.3	2.4.3.x
linux / linux_kernel	2.2.14	2.2.14.x
linux / linux_kernel	2.2.11	2.2.11.x
linux / linux_kernel	2.4.1	2.4.1.x
linux / linux_kernel	2.4.4	2.4.4.x
linux / linux_kernel	2.2.17	2.2.17.x
linux / linux_kernel	2.4.6	2.4.6.x
linux / linux_kernel	2.2.9	2.2.9.x

Vulnerability Database

289,599

CVE-2002-0570