CVE-2003-0001 Information disclosure in n/a
Remote attackers can read sensitive kernel memory or previous packet data via malformed Ethernet frames due to missing padding in NIC drivers.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2003-0001?
CVE-2003-0001 is a medium-severity vulnerability in Freebsd Freebsd, published on 8 Jan 2003. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as demonstrated by Etherleak.
Weakness: CWE-200
Which versions are affected by CVE-2003-0001?
It affects 5 products.
Products include Freebsd Freebsd, Linux kernel, Microsoft Windows 2000, Microsoft Windows 2000 Terminal Services, Netbsd Netbsd.
How do I fix CVE-2003-0001?
Apply the vendor's patch.
Is CVE-2003-0001 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2003-0001 exists.
Public exploit code: 3 Exploit-DB entries and 1 proofs of concept on GitHub.
Other vulnerabilities in Freebsd Freebsd
Sources
Also known as GHSA-945x-53jf-h5qf.