NetSight
IP …
medium5.0Public exploit code

CVE-2003-0001

Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previ…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as demonstrated by Etherleak.

Affected products

VendorProductAffected versions
FreebsdFreebsd
Versions 4.2, 4.3, 4.4, 4.5, 4.6, 4.7
LinuxLinux Kernel
Versions 2.4.1, 2.4.2, 2.4.3, 2.4.4, 2.4.5, 2.4.6
MicrosoftWindows 2000
All versions
MicrosoftWindows 2000 Terminal Services
All versions
NetbsdNetbsd
Versions 1.5, 1.5.1, 1.5.2, 1.5.3, 1.6

Weakness classification

CWE-200

References