CVE-2003-0001
Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes,...
Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as demonstrated by Etherleak.
Exploit likelihood
What each source reports
NVD Score used
Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as demonstrated by Etherleak.
- Record
CVE-2003-0001- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE ListNo score
Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as demonstrated by Etherleak.
- Record
CVE-2003-0001- Updated
- 2026-11-02
EUVDEUVD-2003-0001No score
Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as demonstrated by Etherleak.
- Record
EUVD-2003-0001- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-945x-53jf-h5qfNo score
Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes,...
Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as demonstrated by Etherleak.
- Record
GHSA-945x-53jf-h5qf- Weakness
- CWE-200
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernel-source-2.4.18Debian:3.0 From an advisory covering 8 CVEs | before 2.4.18-9 | 2.4.18-9 |
kernel-image-2.4.18-1-i386Debian:3.0 From an advisory covering 8 CVEs | before 2.4.18-8 | 2.4.18-8 |
kernel-image-2.4.18-i386bfDebian:3.0 From an advisory covering 8 CVEs | before 2.4.18-5woody1., plus listed versions 2.4.18-5 | 2.4.18-5woody1. |
kernel-patch-2.4.18-powerpcDebian:3.0 From an advisory covering 7 CVEs | before 2.4.18-1woody1 | 2.4.18-1woody1 |
kernel-source-2.4.17Debian:3.0 From an advisory covering 8 CVEs | before 2.4.17-1woody1 | 2.4.17-1woody1 |
kernel-patch-2.4.17-mipsDebian:3.0 From an advisory covering 8 CVEs | before 2.4.17-0.020226.2.woody2 | 2.4.17-0.020226.2.woody2 |
kernel-source-2.2.20Debian:3.0 From an advisory covering 9 CVEs | before 2.2.20-5woody2 | 2.2.20-5woody2 |
kernel-image-2.2.20-i386Debian:3.0 From an advisory covering 9 CVEs | before 2.2.20-5woody3 | 2.2.20-5woody3 |
kernel-image-2.4.17-ia64Debian:3.0 From an advisory covering 12 CVEs | before kernel-image-2.4.17-ia64 | kernel-image-2.4.17-ia64 |
kernel-patch-2.4.17-s390Debian:3.0 From an advisory covering 10 CVEs | before 0.0.20020816-0.woody.2 | 0.0.20020816-0.woody.2 |
kernel-image-2.4.17-s390Debian:3.0 From an advisory covering 10 CVEs | before 2.4.17-2.woody.3 | 2.4.17-2.woody.3 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Linux Kernel 2.0.x/2.2.x/2.4.x (FreeBSD 4.x) - Network Device Driver Frame Padding Information Disclosure | 2007-03-23 |
| Exploit-DB | Ethernet Device Drivers Frame Padding - 'Etherleak' Infomation Leakage | 2007-03-23 |
| Exploit-DB | Cisco ASA < 8.4.4.6 < 8.2.5.32 - Ethernet Information Leak | 2013-06-10 |
| PoC in GitHub | marb08/etherleak-checker | 2024-10-01 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, exploits, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2003-0001 is a medium vulnerability (CVSS 5.0) in Linux Kernel, published January 8, 2003. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 72.5%, the 99th percentile. No source names a fixed version.
References
securityfocus.com/archive/1/307564/30/26270/threaded
securitytracker.com/id/1031583
osvdb.org/9962
redhat.com/support/errata/RHSA-2003-088.html
oracle.com/technetwork/topics/security/cpujan2015-1972971.html
marc.info?l=bugtraq&m=104222046632243&w=2
Show 11 moreShow less
kb.cert.org/vuls/id/412115
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2665
archives.neohapsis.com/archives/vulnwatch/2003-q1/0016.html
secunia.com/advisories/7996
atstake.com/research/advisories/2003/a010603-1.txt
nvd.nist.gov/vuln/detail/CVE-2003-0001
github.com/advisories/GHSA-945x-53jf-h5qf