Unscored severity · published Jan 17, 2003
CVE-2003-0001
Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or…
–
CVSS
72.5%
EPSS
No
On KEV
Description
Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as demonstrated by Etherleak.
Exploitation
Is it being used?
Exploit prediction (EPSS)72.5% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Kernel · Linux
2.4.1; 2.4.2; 2.4.3; 2.4.4; 2.4.5; 2.4.6; +14 more · source: NVD
FR
Freebsd · Freebsd
4.2; 4.3; 4.4; 4.5; 4.6; 4.7 · source: NVD
NE
Netbsd · Netbsd
1.5; 1.5.1; 1.5.2; 1.5.3; 1.6 · source: NVD
W2
Windows 2000 · Microsoft
All versions, or not specified · source: NVD
W2
Windows 2000 Terminal Services · Microsoft
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2003-0001
CVE.org
https://www.cve.org/CVERecord?id=CVE-2003-0001
archives.neohapsis.com
http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0016.html
marc.info
http://marc.info/?l=bugtraq&m=104222046632243&w=2
secunia.com
http://secunia.com/advisories/7996
Vendor Advisory
http://www.atstake.com/research/advisories/2003/a010603-1.txt
www.atstake.com
http://www.atstake.com/research/advisories/2003/atstake_etherleak_report.pdf
Third Party Advisory
http://www.kb.cert.org/vuls/id/412115
More from Kernel
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
8.8
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
8.8
CVE-2013-6282
Linux Kernel Improper Input Validation Vulnerability
8.4
CVE-2022-0185
Linux Kernel Heap-Based Buffer Overflow Vulnerability
8.4
CVE-2013-2094
Linux Kernel Privilege Escalation Vulnerability