CVE-2000-1140 Information disclosure in n/a
Attackers can detect honeypot presence by comparing kill command results with /proc listings, compromising stealth.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2000-1140?
CVE-2000-1140 is a low-severity vulnerability in n/a, published on 22 Jan 2001. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Recourse ManTrap 1.6 does not properly hide processes from attackers, which could allow attackers to determine that they are in a honeypot system by comparing the results from kill commands with the process listing in the /proc filesystem.
Which versions are affected by CVE-2000-1140?
It affects 1 product.
Products include Recourse Technologies Mantrap.
How do I fix CVE-2000-1140?
No fix has been published for CVE-2000-1140 yet. Limit exposure of the affected software until one is available.
Is CVE-2000-1140 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2000-1140 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in n/a
Sources
Also known as GHSA-jh79-c7cc-fx5h.