CVE-2003-0001

medium · 5

Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as demonstrated by Etherleak.

CVSS

70.2%

EPSS (exploit prob.)

99th

EPSS percentile

2003-01-17

Published

AV:N/AC:L/Au:N/C:P/I:N/A:N

Weaknesses

CWE-200

Affected products

Vendor	Product	Affected versions
freebsd	freebsd	4.2
freebsd	freebsd	4.3
freebsd	freebsd	4.4
freebsd	freebsd	4.5
freebsd	freebsd	4.6
freebsd	freebsd	4.7
linux	linux_kernel	2.4.1
linux	linux_kernel	2.4.2
linux	linux_kernel	2.4.3
linux	linux_kernel	2.4.4
linux	linux_kernel	2.4.5
linux	linux_kernel	2.4.6
linux	linux_kernel	2.4.7
linux	linux_kernel	2.4.8
linux	linux_kernel	2.4.9
linux	linux_kernel	2.4.10
linux	linux_kernel	2.4.11
linux	linux_kernel	2.4.12
linux	linux_kernel	2.4.13
linux	linux_kernel	2.4.14
linux	linux_kernel	2.4.15
linux	linux_kernel	2.4.16
linux	linux_kernel	2.4.17
linux	linux_kernel	2.4.18
linux	linux_kernel	2.4.19
linux	linux_kernel	2.4.20
microsoft	windows_2000	all versions
microsoft	windows_2000	all versions
microsoft	windows_2000	all versions
microsoft	windows_2000_terminal_services	all versions
microsoft	windows_2000_terminal_services	all versions
microsoft	windows_2000_terminal_services	all versions
netbsd	netbsd	1.5
netbsd	netbsd	1.5.1
netbsd	netbsd	1.5.2
netbsd	netbsd	1.5.3
netbsd	netbsd	1.6

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2003-0001