Vulnerability in N/a
CVE-2003-0001
Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as demonstrated by Ethe…
EPSS: 0.717 (99.3th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
Public proof-of-concept exploits
References
- 20030117 Re: More information regarding Etherleak (mailing-list, x_refsource_BUGTRAQ)
- 1031583 (vdb-entry, x_refsource_SECTRACK)
- 9962 (x_refsource_OSVDB, vdb-entry)
- RHSA-2003:088 (x_refsource_REDHAT, vendor-advisory)
- www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html (x_refsource_CONFIRM)
- 20030110 More information regarding Etherleak (mailing-list, x_refsource_BUGTRAQ)
- VU#412115 (x_refsource_CERT-VN, third-party-advisory)
- 20030106 Etherleak: Ethernet frame padding information leakage (A010603-1) (mailing-list, x_refsource_BUGTRAQ)
- oval:org.mitre.oval:def:2665 (signature, x_refsource_OVAL, vdb-entry)
- 20030110 More information regarding Etherleak (mailing-list, x_refsource_VULNWATCH)
Frequently asked questions
- What is CVE-2003-0001?
- CVE-2003-0001 is a vulnerability in N/a. Published 2003-01-08.
- Is CVE-2003-0001 known to be exploited?
- 7 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.