Trending
CVE-2003-0001

CVE detail

CVE-2003-0001

Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as demonstrated by Etherleak.

CVSS 5.0 · MediumBuzz score 12.04 OTX pulses

Buzz score

Why this CVE is surfacing

Buzz score total 12.0

This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.

Buzz score components · mention 0.0 · diversity 0.0 · KEV 0.0 · OTX 12.0 · PoC 0.0

Mention score

0.0

0 evidence mentions in the snapshot

Diversity score

0.0

0 sources across 0 categories

KEV score

0.0

No KEV entry observed

OTX score

12.0

4 OTX pulses

PoC score

0.0

0 repos · best confidence N/A

Best PoC traction

Maximum stars on a matched PoC repo

Why it matters now

Mention timeline

Total mentions: 0; within the 30d window
Peak daily: 0; highest bucket

Evidence

Source links by recency

Newest mentions first

0 source links · newest first

Exploit code

Public exploit repository references

Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.

0 repository references · best confidence N/A · max 0 stars

No public PoC repositories have been matched yet.

Related records

Similar CVEs

6 related CVEs with shared weakness or product evidence

CVE-2008-4609
The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to ca…
CVSS 7.1 · High
1 mention
CVE-2001-1244
Multiple TCP implementations could allow remote attackers to cause a denial of service (bandwidth and CPU exhaustion) by setting the maximum segment size (MSS) to a very small num…
CVSS 5.0 · Medium
CVE-2011-2480
Information Disclosure vulnerability in the 802.11 stack, as used in FreeBSD before 8.2 and NetBSD when using certain non-x86 architectures. A signedness error in the IEEE80211_IO…
CVSS 7.5 · High
CVE-2010-3014
The Coda filesystem kernel module, as used in NetBSD and FreeBSD, when Coda is loaded and Venus is running with /coda mounted, allows local users to read sensitive heap memory via…
CVSS 1.2 · Low
CVE-2009-0601
Format string vulnerability in Wireshark 0.99.8 through 1.0.5 on non-Windows platforms allows local users to cause a denial of service (application crash) via format string specif…
CVSS 2.1 · Low
CVE-2026-14098
Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severit…
CVSS 6.5 · Medium
4 mentions

External lookup

Potential internet exposure

Potential exposure only — not proof of vulnerability.Shodan results indicate potentially internet-exposed products, not confirmed vulnerable systems. They do not confirm that any returned system is vulnerable to CVE-2003-0001.

Product-level CPE searches intentionally omit version fields and NVD version-range or configuration certainty. Verify the exact product version and configuration independently.

Sign-in required. Shodan requires you to sign in to run these filter searches.

Product CPE queries

Derived from this CVE's existing NVD CPE 2.3 records; the application, operating-system, or hardware part is retained.

cpe:2.3:o:freebsd:freebsdSearch this product on Shodan
cpe:2.3:o:linux:linux_kernelSearch this product on Shodan
cpe:2.3:o:microsoft:windows_2000Search this product on Shodan
cpe:2.3:o:microsoft:windows_2000_terminal_servicesSearch this product on Shodan
cpe:2.3:o:netbsd:netbsdSearch this product on Shodan

Exact CVE query

Eligible paid Shodan plan required

Shodan's exact vuln: filter is separate from the product searches above and requires an eligible paid Shodan plan.

vuln:CVE-2003-0001Search this CVE on Shodan

These are outbound search links only. cvebuzz makes no Shodan API call, uses no Shodan API key, and does not display live result counts.

Metadata

Canonical fields

NVD status

Unavailable

Published

Jan 17, 2003

Modified

Jun 16, 2026

Official record

Authoritative NVD record

CVSS vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

CWE IDs

Vendor classifications

How this vector reads

CVSS 2.0 base metrics decoded below. This explanation does not recalculate or change the NVD score.

Access Vector (AV): Network. The vulnerable system can be reached across network boundaries.
Access Complexity (AC): Low. No special conditions beyond the attacker-controlled steps are required.
Authentication (Au): None. The attacker does not need to authenticate.
Confidentiality Impact (C): Partial. There is a limited impact to this security property.
Integrity Impact (I): None. There is no impact to this security property.
Availability Impact (A): None. There is no impact to this security property.

Signals

Exploitation indicators

4 stored signals · no KEV · 4 OTX pulses

OTXOTX
- author_name: msudosos
- created: 2026-02-16T04:21:45.064000+00:00
- description: CVE Data msudosos
- name: CVE Data
- pulse_id: 69929b597293fe5837b9c95c
- tags:
- url: https://otx.alienvault.com/pulse/69929b597293fe5837b9c95c
Observed Feb 16, 2026, 4:21 AM
OTXOTX
- author_name: CyberHunter_NL
- created: 2025-05-01T08:12:36.386000+00:00
- description: A high-risk flaw in Microsoft's Telnet Server's MS-TNAP implementation allows unauthenticated attackers to bypass the Guest account login restriction on Microsoft Telnet Server. By sending a specially crafted NTLM Type 3 message with empty credentials, attackers can authenticate as the Guest account despite restrictions. This bypasses the server's Guest login restriction, normally seen in password authentication as "Telnet connection not allowed to the Guest account." If the Guest account is in the TelnetClients group, attackers may also gain unauthorized Telnet session access.
- name: Microsoft Telnet Server MS-TNAP Guest Access Restriction Bypass Exploit
- pulse_id: 68132cf4352ace6544f645c3
- tags:
- url: https://otx.alienvault.com/pulse/68132cf4352ace6544f645c3
Observed May 1, 2025, 8:12 AM
OTXOTX
- author_name: Disable_Duck
- created: 2025-03-04T08:35:38.390000+00:00
- description: Thor Lite Linux 64 - Sample Lab Device 2 - incomplete https://tip.neiki.dev/file/09de67f8d3ce9a276e9665dc2e0013577b38d60b0518ffe7961bdc7f8755a52d SCANID: S-KhOoOrXsco8
- name: SCANID: S-KhOoOrXsco8: Thor Lite Linux 64 - Sample Lab Device 2 - incomplete (not enriched)
- pulse_id: 67c6bb5aa601e91b1314ff44
- tags:
- url: https://otx.alienvault.com/pulse/67c6bb5aa601e91b1314ff44
Observed Mar 4, 2025, 8:35 AM
OTXOTX
- author_name: Disable_Duck
- created: 2024-05-21T15:54:41.886000+00:00
- description: Joe-MBA_thor_2024-05-18_1025 Ubuntu 22.04.4 LTS Scan ID S-I9VvMTB6cZU hmmm...I can't tell if this is 'way too much' or 'probably fairly accurate'
- name: Thor Lite Scan - 10.7.15 - Ubuntu Scan on Archived Files
- pulse_id: 664cc3c1938ed0b9abf026a2
- tags:
- url: https://otx.alienvault.com/pulse/664cc3c1938ed0b9abf026a2
Observed May 21, 2024, 3:54 PM