CVE-2003-0001 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2003-0001
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2003-0001

Description: Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as demonstrated by Etherleak.

CVE Status: Candidate

References: VULNWATCH http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0016.html SAID Secunia Advisory: SA7996 REDHAT http://www.redhat.com/support/errata/RHSA-2003-025.html http://www.redhat.com/support/errata/RHSA-2003-088.html OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:2665 OSVDB 9962 MISC http://www.atstake.com/research/advisories/2003/atstake_etherleak_report.pdf CERT-VN 412115 BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/307564/30/26270/threaded http://www.securityfocus.com/archive/1/archive/1/305335/30/26420/threaded http://marc.theaimsgroup.com/?l=bugtraq&m=104222046632243&w=2 ATSTAKE http://www.atstake.com/research/advisories/2003/a010603-1.txt

Return to the previous page.