Oval Definition:oval:org.mitre.oval:def:2665
Revision Date:2016-02-19Version:16
Title:Data Leak in NIC
Description:Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as demonstrated by Etherleak.
Family:unixClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2003-0001
Platform(s):Sun Solaris 7
Product(s):Sun Am7990 Ethernet Driver
Definition Synopsis
  • Software section
  • Solaris 7,8,or 9 installed
  • Solaris 8 Installed
  • OR Solaris 7 Installed
  • OR Solaris 9 Installed
  • AND NOT Patch 112604-02 or later installed
  • AND NOT Patch 112609-02 or later installed
  • AND NOT Patch 115172-01 or later installed
  • AND Configuration section
  • Lance Ethernet (le) interface configured to start
  • AND Lance Ethernet interface in use
  • BACK