CVE

Id
6830  
CVE No.
CVE-2003-0001  
Status
Candidate  
Description
Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as demonstrated by Etherleak.  
Phase
Modified (20161205)  
Votes
ACCEPT(3) Baker, Cole, Wall | MODIFY(2) Cox, Frech | NOOP(1) Christey  
Comments
Christey> ENGARDE:ESA-20030318-009 | URL:http://www.linuxsecurity.com/advisories/engarde_advisory-2976.html | CHANGE> [Cox changed vote from ACCEPT to MODIFY] | Cox> Addref: RHSA-2003:088 | Christey> MANDRAKE:MDKSA-2003:039 | URL:http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2003:039 | Frech> XF:ethernet-driver-information-leak(10996) | Christey> SGI:20030601-01-A | Christey> DEBIAN:DSA-311 | URL:http://www.debian.org/security/2003/dsa-311 | Christey> MANDRAKE:MDKSA-2003:066 | Christey> DEBIAN:DSA-332 | URL:http://www.debian.org/security/2003/dsa-332 | DEBIAN:DSA-336 | URL:http://www.debian.org/security/2003/dsa-336 | Christey> HP:HPSBUX0305-261 | URL:http://www-1.ibm.com/services/continuity/recover1.nsf/MSS/MSS-OAR-E01-2003.0708.1 | DEBIAN:DSA-312 | URL:http://www.debian.org/security/2003/dsa-312 | BID:6535 | URL:http://www.securityfocus.com/bid/6535 | Christey> MANDRAKE:MDKSA-2003:074 | URL:http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2003:074 | Christey> DEBIAN:DSA-423 | URL:http://www.debian.org/security/2004/dsa-423 | Christey> BUGTRAQ:20040207 [Fwd: zyxel prestige ethernet information leakage] | URL:http://marc.theaimsgroup.com/?l=bugtraq&m=107618991322594&w=2 | Christey> DEBIAN:DSA-442 | URL:http://www.debian.org/security/2004/dsa-442 | Christey> SGI:20030601-01-I | URL:ftp://patches.sgi.com/support/free/security/advisories/20030601-01-A | Cox> Change description to say "in Linux 2.4 prior to 2.4.21" as | this was fixed in Linux 2.4.21 by changesets committed by Alan Cox on | 5th Feb 2003.  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
38645 6830 CVE-2003-0001 ATSTAKE:A010603-1  View
38646 6830 CVE-2003-0001 URL:http://www.atstake.com/research/advisories/2003/a010603-1.txt  View
38647 6830 CVE-2003-0001 BUGTRAQ:20030110 More information regarding Etherleak  View
38648 6830 CVE-2003-0001 URL:http://marc.info/?l=bugtraq&m=104222046632243&w=2  View
38649 6830 CVE-2003-0001 BUGTRAQ:20030106 Etherleak: Ethernet frame padding information leakage (A010603-1)  View
38650 6830 CVE-2003-0001 URL:http://www.securityfocus.com/archive/1/archive/1/305335/30/26420/threaded  View
38651 6830 CVE-2003-0001 BUGTRAQ:20030117 Re: More information regarding Etherleak  View
38652 6830 CVE-2003-0001 URL:http://www.securityfocus.com/archive/1/archive/1/307564/30/26270/threaded  View
38653 6830 CVE-2003-0001 VULNWATCH:20030110 More information regarding Etherleak  View
38654 6830 CVE-2003-0001 URL:http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0016.html  View
38655 6830 CVE-2003-0001 MISC:http://www.atstake.com/research/advisories/2003/atstake_etherleak_report.pdf  View
38656 6830 CVE-2003-0001 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html  View
38657 6830 CVE-2003-0001 REDHAT:RHSA-2003:088  View
38658 6830 CVE-2003-0001 URL:http://www.redhat.com/support/errata/RHSA-2003-088.html  View
38659 6830 CVE-2003-0001 CERT-VN:VU#412115  View
38660 6830 CVE-2003-0001 URL:http://www.kb.cert.org/vuls/id/412115  View
38661 6830 CVE-2003-0001 REDHAT:RHSA-2003:025  View
38662 6830 CVE-2003-0001 URL:http://www.redhat.com/support/errata/RHSA-2003-025.html  View
38663 6830 CVE-2003-0001 OSVDB:9962  View
38664 6830 CVE-2003-0001 URL:http://www.osvdb.org/9962  View
38665 6830 CVE-2003-0001 OVAL:oval:org.mitre.oval:def:2665  View
38666 6830 CVE-2003-0001 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:2665  View
38667 6830 CVE-2003-0001 SECTRACK:1031583  View
38668 6830 CVE-2003-0001 URL:http://www.securitytracker.com/id/1031583  View
38669 6830 CVE-2003-0001 SECUNIA:7996  View

Related JVN