CVE-2003-0001
FreeBSD - Information Exposure via Ethernet NIC Frame Padding
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2003-0001. PoCs published by Jon Hart, prdelka, marb08.
AI-analyzed exploit summary This Perl script demonstrates the 'etherleak' vulnerability (CVE-2003-0001) by capturing and analyzing Ethernet frames to extract sensitive kernel memory leaked due to improper padding. It uses Net::Pcap to sniff network traffic and identifies non-NULL padding in frames, which may contain sensitive data.
Description
Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as demonstrated by Etherleak.
Exploits (4)
This Perl script demonstrates the 'etherleak' vulnerability (CVE-2003-0001) by capturing and analyzing Ethernet frames to extract sensitive kernel memory leaked due to improper padding. It uses Net::Pcap to sniff network traffic and identifies non-NULL padding in frames, which may contain sensitive data.
This Perl script demonstrates the 'etherleak' vulnerability (CVE-2003-0001) by capturing and analyzing Ethernet frames to detect sensitive kernel memory leaks due to improper padding in network device drivers.
This exploit leverages the 'Etherleak' vulnerability (CVE-2003-0001) to extract memory contents from vulnerable network devices by sending crafted ARP or ICMP packets and capturing padded responses. The leaked data is saved to a file for analysis.
This repository contains a Python script that scans for the Etherleak vulnerability (CVE-2003-0001) by sending ICMP, ARP, or TCP packets and analyzing the padding data in responses for potential memory leaks. It does not exploit the vulnerability but detects its presence.