The throttle capability in Swatch may fail to report certain events if (1) the same type of event occurs after the throttle period, or (2) when multiple events matching the same "watchfor" expression do not occur after the throttle period, which could allow attackers to avoid detection.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2002-08-31T04:00:00
Updated: 2024-08-08T03:03:49.270Z
Reserved: 2002-08-16T00:00:00
Link: CVE-2002-0896
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2002-10-04T04:00:00.000
Modified: 2008-09-05T20:29:14.567
Link: CVE-2002-0896
Redhat
No data.