CVE-2003-0001
45Vexday Risk Score
Sem sinal de exploração. Ela tem prova de conceito pública.
ssvc Attendepss 70%
da publicação à arma1535 dias
Publicada no NVD8 de jan.
1ª PoC+1535d
probabilidade de exploração
70%top 1% das CVEs
exploração observada
nãonenhuma fonte reporta
4 exploit(s) público(s)
Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as demonstrated by Etherleak.
Produtos afetados
n/a · n/aPoCs públicas encontradas — 4✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/22131exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/3555exploitdbwww.exploit-db.com/exploits/26076não verificadogithubgithub.com/marb08/etherleak-checker★ 5⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0016.htmlhttp://marc.info/?l=bugtraq&m=104222046632243&w=2http://secunia.com/advisories/7996https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2665http://www.atstake.com/research/advisories/2003/a010603-1.txthttp://www.atstake.com/research/advisories/2003/atstake_etherleak_report.pdfhttp://www.kb.cert.org/vuls/id/412115http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.htmlhttp://www.osvdb.org/9962http://www.redhat.com/support/errata/RHSA-2003-025.htmlhttp://www.redhat.com/support/errata/RHSA-2003-088.htmlhttp://www.securityfocus.com/archive/1/305335/30/26420/threaded