CVE-2003-0001(freebsd / freebsd)

CVE-2003-0001 | Packing a parcel with private notes Etherleak was like using old documents as packing material. Some Ethernet drivers filled spare frame space with leftover data instead of zeros, potentially exposing earlier packets or kernel memory. Padding matters.

Ethernet frames may need padding to reach a minimum size. That extra space must not reveal old data. The issue affected multiple network-card drivers, not every Ethernet device. Lesson: clear data before reuse. Official record: https://github.com/CVEProject/cvelistV5/blob/main/cves/2003/0xxx/CVE-2003-0001.json

CVE-2003-0001, visualized: reusing an envelope without removing old scraps can reveal more than the new letter. Etherleak affected multiple Ethernet NIC drivers that did not pad frames with null bytes. Malformed packets could expose information from previous packets or kernel memory to remote attackers. The envelope is an analogy; the technical issue is unzeroed padding. Source: https://www.cve.org/CVERecord?id=CVE-2003-0001