NVD

Id
73152  
Name
CVE-2003-0001  
Description
Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as demonstrated by Etherleak.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-03  
Published
2003-01-17  
Modified Date
2016-12-06  
Seq
2003-0001  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
376506 73152 CVE-2003-0001 20030110 More information regarding Etherleak  View
376507 73152 CVE-2003-0001 20030110 More information regarding Etherleak  View
376508 73152 CVE-2003-0001 oval:org.mitre.oval:def:2665  View
376509 73152 CVE-2003-0001 A010603-1  View
376510 73152 CVE-2003-0001 http://www.atstake.com/research/advisories/2003/atstake_etherleak_report.pdf  View
376511 73152 CVE-2003-0001 VU#412115  View
376512 73152 CVE-2003-0001 http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html  View
376513 73152 CVE-2003-0001 RHSA-2003:025  View
376514 73152 CVE-2003-0001 RHSA-2003:088  View
376515 73152 CVE-2003-0001 20030106 Etherleak: Ethernet frame padding information leakage (A010603-1)  View
376516 73152 CVE-2003-0001 20030117 Re: More information regarding Etherleak  View
376517 73152 CVE-2003-0001 1031583  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63277 JVNDB-2003-000003 複数ベンダ製品の Ethernet Network Interface Card デバイスドライバに情報漏洩の脆弱性 Ethernet Network Interface Card (NIC) デバイスドライバには、パケットのデータフィールドが一定のサイズより小さい場合、埋められていない領域を NULL で埋めずに、以前に送信したフレームデータを再利用してそのフレームデータで埋めてしまう脆弱性が存在します。 CVE-2003-0001 6829 CVE-2003-0001 73152 5 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000003.html 2003-01-06 2015-01-22 View