CVE-2003-0001

Freebsd - Information Disclosure

Title source: rule

Description

Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as demonstrated by Etherleak.

Exploits (4)

exploitdb WORKING POC VERIFIED
by Jon Hart · perlremotemultiple
https://www.exploit-db.com/exploits/3555
exploitdb WORKING POC VERIFIED
by Jon Hart · perlremotebsd
https://www.exploit-db.com/exploits/22131
exploitdb WORKING POC
by prdelka · pythondoshardware
https://www.exploit-db.com/exploits/26076
nomisec SCANNER 5 stars
by marb08 · poc
https://github.com/marb08/etherleak-checker

Scores

EPSS 0.0343
EPSS Percentile 87.5%

Details

CWE
CWE-200
Status published
Products (33)
freebsd/freebsd 4.2
freebsd/freebsd 4.3
freebsd/freebsd 4.4
freebsd/freebsd 4.5
freebsd/freebsd 4.6
freebsd/freebsd 4.7
linux/linux_kernel 2.4.1
linux/linux_kernel 2.4.2
linux/linux_kernel 2.4.3
linux/linux_kernel 2.4.4
... and 23 more
Published Jan 17, 2003
Tracked Since Feb 18, 2026