Information Leakage Vulnerability in Network Interface Card Drivers by Multiple Vendors

CVE-2003-0001

Summary

Multiple ethernet Network Interface Card (NIC) device drivers exhibit a vulnerability where they fail to properly pad frames with null bytes. This shortcoming can be exploited by remote attackers using malformed packets. By doing so, attackers may gain unauthorized access to sensitive information housed in previous packets or kernel memory, leading to potential data breaches and security risks. This vulnerability has been notably illustrated through the Etherleak demonstration.

References