CVE-2003-0001

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 72.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2003-01-17 · updated 2026-06-16
Weakness: CWE-200

Description

Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as demonstrated by Etherleak.

Affected products

FreeBSD: 4.2, 4.3, 4.4, 4.5, 4.6, 4.7
Linux kernel: 2.4.1, 2.4.2, 2.4.3, 2.4.4, 2.4.5, 2.4.6 (+14)
Microsoft Windows 2000: all versions
Microsoft Windows 2000 Terminal Services: all versions
Netbsd: 1.5, 1.5.1, 1.5.2, 1.5.3, 1.6

References

http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0016.html
http://marc.info/?l=bugtraq&m=104222046632243&w=2
http://secunia.com/advisories/7996
http://www.atstake.com/research/advisories/2003/a010603-1.txt
http://www.atstake.com/research/advisories/2003/atstake_etherleak_report.pdf
http://www.kb.cert.org/vuls/id/412115
http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
http://www.osvdb.org/9962
http://www.redhat.com/support/errata/RHSA-2003-025.html
http://www.redhat.com/support/errata/RHSA-2003-088.html
http://www.securityfocus.com/archive/1/305335/30/26420/threaded
http://www.securityfocus.com/archive/1/307564/30/26270/threaded

Get alerted when CVE-2003-0001 or the next vulnerability affects your stack