$ cve CVE-2003-0001 JSON

CVE-2003-0001 EXPLOIT

5.0

MEDIUM · CVSS 2.0 · EPSS 70.2% (pctl 99)

Patch early

A public exploit exists.

Description

Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as demonstrated by Etherleak.

Scoring

CVSS	5.0 (MEDIUM, v2.0)
Vector	AV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS	70.24% — more likely to be exploited than 99% of all CVEs
Weakness	CWE-200
On CISA KEV	no
Public exploit	yes
Published	2003-01-17
Last modified	2026-06-16

Affected (5)

Vendor	Product
freebsd	freebsd
linux	linux kernel
microsoft	windows 2000
microsoft	windows 2000 terminal services
netbsd	netbsd

Public exploits

Source	Title	Date
exploit-db	Cisco ASA < 8.4.4.6 < 8.2.5.32 - Ethernet Information Leak	2013-06-10
exploit-db	Linux Kernel 2.0.x/2.2.x/2.4.x (FreeBSD 4.x) - Network Device Driver Frame Padding Information Disclosure	2007-03-23
exploit-db	Ethernet Device Drivers Frame Padding - 'Etherleak' Infomation Leakage	2007-03-23

References

→ the Explorer · watch your stack · NVD