Information disclosure in Freebsd
CVE-2003-0001
Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as demonstrated by Ethe…
Vulnerability class: Information Disclosure
EPSS: 0.700 (99.3th percentile) — read the EPSS interpretation.
Affected products
- Freebsd — versions 4.2, 4.3, 4.4
- Linux Linux_kernel — versions 2.4.1, 2.4.2, 2.4.3
- Microsoft Windows_2000
- Microsoft Windows_2000_terminal_services
- Netbsd — versions 1.5, 1.5.1, 1.5.2
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (x_refsource_OVAL, signature, vdb-entry)
- cve@mitre.org (mailing-list, x_refsource_VULNWATCH)
Frequently asked questions
- What is CVE-2003-0001?
- CVE-2003-0001 is a vulnerability in Freebsd, classified under Information Disclosure. Published 2003-01-17.
- Is CVE-2003-0001 known to be exploited?
- 7 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.