Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as demonstrated by Etherleak.

The version of Junos OS installed on the remote host is affected by multiple vulnerabilities as referenced in the JSA69720 advisory.

  - Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which     allows remote attackers to obtain information from previous packets or kernel memory by using malformed     packets, as demonstrated by Etherleak. (CVE-2003-0001)

  - An Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the PFE of Juniper Networks     Junos OS on PTX Series and QFX10k Series allows an adjacent unauthenticated attacker to gain access to     sensitive information. PTX1000 and PTX10000 Series, and QFX10000 Series and PTX5000 Series devices     sometimes do not reliably pad Ethernet packets, and thus some packets can contain fragments of system     memory or data from previous packets. This issue is also known as 'Etherleak' and often detected as     CVE-2003-0001. This issue affects: Juniper Networks Junos OS on PTX1000 and PTX10000 Series: All versions     prior to 18.4R3-S11; 19.1 versions prior to 19.1R2-S3, 19.1R3-S7; 19.2 versions prior to 19.2R1-S8,     19.2R3-S4; 19.3 versions prior to 19.3R3-S4; 19.4 versions prior to 19.4R2-S5, 19.4R3-S6; 20.1 versions     prior to 20.1R3-S2; 20.2 versions prior to 20.2R3-S3; 20.3 versions prior to 20.3R3-S2; 20.4 versions     prior to 20.4R3-S4; 21.1 versions prior to 21.1R2-S1, 21.1R3; 21.2 versions prior to 21.2R1-S1, 21.2R2.
    Juniper Networks Junos OS on QFX10000 Series and PTX5000 Series: All versions prior to 18.3R3-S6; 18.4     versions prior to 18.4R2-S9, 18.4R3-S10; 19.1 versions prior to 19.1R2-S3, 19.1R3-S7; 19.2 versions prior     to 19.2R1-S8, 19.2R3-S4; 19.3 versions prior to 19.3R3-S4; 19.4 versions prior to 19.4R2-S6, 19.4R3-S6;
    20.1 versions prior to 20.1R3-S2; 20.2 versions prior to 20.2R3-S3; 20.3 versions prior to 20.3R3-S1; 20.4     versions prior to 20.4R3-S1; 21.1 versions prior to 21.1R2-S1, 21.1R3; 21.2 versions prior to 21.2R2.
    (CVE-2022-22216)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: AMD pcnet driver). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows successful unauthenticated network attacks via TCP/IP. Successful attack of this vulnerability can result in unauthorized read access to a subset of Solaris accessible data.

This Solaris system is missing necessary patches to address critical security updates :

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: AMD pcnet driver).
    Supported versions that are affected are 10 and 11.
    Easily exploitable vulnerability allows successful     unauthenticated network attacks via TCP/IP. Successful     attack of this vulnerability can result in unauthorized     read access to a subset of Solaris accessible data.
    (CVE-2003-0001)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: RPC Utility).
    Supported versions that are affected are 10 and 11.
    Difficult to exploit vulnerability requiring logon to     Operating System. Successful attack of this     vulnerability can result in unauthorized update, insert     or delete access to some Solaris accessible data and     ability to cause a partial denial of service (partial     DOS) of Solaris. (CVE-2015-0429)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: RPC Utility).
    Supported versions that are affected are 10 and 11.
    Difficult to exploit vulnerability requiring logon to     Operating System. Successful attack of this     vulnerability can result in unauthorized read access to     a subset of Solaris accessible data. (CVE-2015-0430)

According to its self-reported version number, the remote Junos device has an information disclosure vulnerability.  SRX1400, SRX3400, and SRX3600 services gateways pad Ethernet packets with data from previous packets instead of padding them with null bytes.  A remote, unauthenticated attacker could exploit this to gain access to sensitive information, which could be used to mount further attacks.

s700_800 11.04 (VVOS) LAN product cumulative patch : 

Potential for Ethernet device drivers to reuse packet data for padding. Cross-reference: CERT/cc VU#412115 and CVE CAN-2003-0001.

s700_800 11.00 EISA 100BT cumulative patch : 

Potential for Ethernet device drivers to reuse packet data for padding. Cross-reference: CERT/cc VU#412115 and CVE CAN-2003-0001.

s700_800 11.04 (VVOS) EISA 100BT cumulative patch : 

Potential for Ethernet device drivers to reuse packet data for padding. Cross-reference: CERT/cc VU#412115 and CVE CAN-2003-0001.

s700_800 11.00 LAN product cumulative patch : 

Potential for Ethernet device drivers to reuse packet data for padding. Cross-reference: CERT/cc VU#412115 and CVE CAN-2003-0001.

Several security related problems have been fixed in the Linux kernel 2.4.17 used for the S/390 architecture, mostly by backporting fixes from 2.4.18 and incorporating recent security fixes. The corrections are listed below with the identification from the Common Vulnerabilities and Exposures (CVE) project :

  - CVE-2002-0429 :
    The iBCS routines in arch/i386/kernel/traps.c for Linux     kernels 2.4.18 and earlier on x86 systems allow local     users to kill arbitrary processes via a binary     compatibility interface (lcall).

  - CAN-2003-0001 :

    Multiple ethernet network interface card (NIC) device     drivers do not pad frames with null bytes, which allows     remote attackers to obtain information from previous     packets or kernel memory by using malformed packets, as     demonstrated by Etherleak.

  - CAN-2003-0244 :

    The route cache implementation in Linux 2.4, and the     Netfilter IP conntrack module, allows remote attackers     to cause a denial of service (CPU consumption) via     packets with forged source addresses that cause a large     number of hash table collisions related to the     PREROUTING chain.

  - CAN-2003-0246 :

    The ioperm system call in Linux kernel 2.4.20 and     earlier does not properly restrict privileges, which     allows local users to gain read or write access to     certain I/O ports.

  - CAN-2003-0247 :

    A vulnerability in the TTY layer of the Linux kernel 2.4     allows attackers to cause a denial of service ('kernel     oops').

  - CAN-2003-0248 :

    The mxcsr code in Linux kernel 2.4 allows attackers to     modify CPU state registers via a malformed address.

  - CAN-2003-0364 :

    The TCP/IP fragment reassembly handling in the Linux     kernel 2.4 allows remote attackers to cause a denial of     service (CPU consumption) via certain packets that cause     a large number of hash table collisions.

  - CAN-2003-0961 :

    An integer overflow in brk() system call (do_brk()     function) for Linux allows a local attacker to gain root     privileges. Fixed upstream in Linux 2.4.23.

  - CAN-2003-0985 :

    Paul Starzetz discovered a flaw in bounds checking in     mremap() in the Linux kernel (present in version 2.4.x     and 2.6.x) which may allow a local attacker to gain root     privileges. Version 2.2 is not affected by this bug.
    Fixed upstream in Linux 2.4.24.

  - CAN-2004-0077 :

    Paul Starzetz and Wojciech Purczynski of isec.pl     discovered a critical security vulnerability in the     memory management code of Linux inside the mremap(2)     system call. Due to missing function return value check     of internal functions a local attacker can gain root     privileges. Fixed upstream in Linux 2.4.25 and 2.6.3.

The IA-64 maintainers fixed several security related bugs in the Linux kernel 2.4.17 used for the IA-64 architecture, mostly by backporting fixes from 2.4.18. The corrections are listed below with the identification from the Common Vulnerabilities and Exposures (CVE) project :

  - CAN-2003-0001 :
    Multiple ethernet network interface card (NIC) device     drivers do not pad frames with null bytes, which allows     remote attackers to obtain information from previous     packets or kernel memory by using malformed packets, as     demonstrated by Etherleak.

  - CAN-2003-0018 :

    Linux kernel 2.4.10 through 2.4.21-pre4 does not     properly handle the O_DIRECT feature, which allows local     attackers with write privileges to read portions of     previously deleted files, or cause file system     corruption.

  - CAN-2003-0127 :

    The kernel module loader in Linux kernel 2.2.x before     2.2.25, and 2.4.x before 2.4.21, allows local users to     gain root privileges by using ptrace to attach to a     child process which is spawned by the kernel.

  - CAN-2003-0461 :

    The virtual file /proc/tty/driver/serial in Linux 2.4.x     reveals the exact number of characters used in serial     links, which could allow local users to obtain     potentially sensitive information such as the length of     passwords.

  - CAN-2003-0462 :

    A race condition in the way env_start and env_end     pointers are initialized in the execve system call and     used in fs/proc/base.c on Linux 2.4 allows local users     to cause a denial of service (crash).

  - CAN-2003-0476 :

    The execve system call in Linux 2.4.x records the file     descriptor of the executable process in the file table     of the calling process, which allows local users to gain     read access to restricted file descriptors.

  - CAN-2003-0501 :

    The /proc filesystem in Linux allows local users to     obtain sensitive information by opening various entries     in /proc/self before executing a setuid program, which     causes the program to fail to change the ownership and     permissions of those entries.

  - CAN-2003-0550 :

    The STP protocol, as enabled in Linux 2.4.x, does not     provide sufficient security by design, which allows     attackers to modify the bridge topology.

  - CAN-2003-0551 :

    The STP protocol implementation in Linux 2.4.x does not     properly verify certain lengths, which could allow     attackers to cause a denial of service.

  - CAN-2003-0552 :

    Linux 2.4.x allows remote attackers to spoof the bridge     Forwarding table via forged packets whose source     addresses are the same as the target.

  - CAN-2003-0961 :

    An integer overflow in brk system call (do_brk function)     for Linux kernel 2.4.22 and earlier allows local users     to gain root privileges.

  - CAN-2003-0985 :

    The mremap system call (do_mremap) in Linux kernel 2.4     and 2.6 does not properly perform boundary checks, which     allows local users to cause a denial of service and     possibly gain privileges by causing a remapping of a     virtual memory area (VMA) to create a zero length VMA.

A number of vulnerabilities have been discovered in the Linux kernel.

  - CAN-2002-1380: Linux kernel 2.2.x allows local users to     cause a denial of service (crash) by using the mmap()     function with a PROT_READ parameter to access     non-readable memory pages through the /proc/pid/mem     interface.
  - CVE-2002-0429: The iBCS routines in     arch/i386/kernel/traps.c for Linux kernels 2.4.18 and     earlier on x86 systems allow local users to kill     arbitrary processes via a binary compatibility interface     (lcall)

  - CAN-2003-0001: Multiple ethernet Network Interface Card     (NIC) device drivers do not pad frames with null bytes,     which allows remote attackers to obtain information from     previous packets or kernel memory by using malformed     packets

  - CAN-2003-0127: The kernel module loader allows local     users to gain root privileges by using ptrace to attach     to a child process that is spawned by the kernel

  - CAN-2003-0244: The route cache implementation in Linux     2.4, and the Netfilter IP conntrack module, allows     remote attackers to cause a denial of service (CPU     consumption) via packets with forged source addresses     that cause a large number of hash table collisions     related to the PREROUTING chain

  - CAN-2003-0246: The ioperm system call in Linux kernel     2.4.20 and earlier does not properly restrict     privileges, which allows local users to gain read or     write access to certain I/O ports.

  - CAN-2003-0247: vulnerability in the TTY layer of the     Linux kernel 2.4 allows attackers to cause a denial of     service ('kernel oops')

  - CAN-2003-0248: The mxcsr code in Linux kernel 2.4 allows     attackers to modify CPU state registers via a malformed     address.

  - CAN-2003-0364: The TCP/IP fragment reassembly handling     in the Linux kernel 2.4 allows remote attackers to cause     a denial of service (CPU consumption) via certain     packets that cause a large number of hash table     collisions

This advisory provides updated 2.2.20 kernel source, and binary kernel images for the i386 architecture. Other architectures and kernel versions will be covered by separate advisories.

A number of vulnerabilities have been discovered in the Linux kernel.

  - CVE-2002-0429: The iBCS routines in     arch/i386/kernel/traps.c for Linux kernels 2.4.18 and     earlier on x86 systems allow local users to kill     arbitrary processes via a binary compatibility interface     (lcall)
  - CAN-2003-0001: Multiple ethernet Network Interface Card     (NIC) device drivers do not pad frames with null bytes,     which allows remote attackers to obtain information from     previous packets or kernel memory by using malformed     packets

  - CAN-2003-0127: The kernel module loader allows local     users to gain root privileges by using ptrace to attach     to a child process that is spawned by the kernel

  - CAN-2003-0244: The route cache implementation in Linux     2.4, and the Netfilter IP conntrack module, allows     remote attackers to cause a denial of service (CPU     consumption) via packets with forged source addresses     that cause a large number of hash table collisions     related to the PREROUTING chain

  - CAN-2003-0246: The ioperm system call in Linux kernel     2.4.20 and earlier does not properly restrict     privileges, which allows local users to gain read or     write access to certain I/O ports.

  - CAN-2003-0247: vulnerability in the TTY layer of the     Linux kernel 2.4 allows attackers to cause a denial of     service ('kernel oops')

  - CAN-2003-0248: The mxcsr code in Linux kernel 2.4 allows     attackers to modify CPU state registers via a malformed     address.

  - CAN-2003-0364: The TCP/IP fragment reassembly handling     in the Linux kernel 2.4 allows remote attackers to cause     a denial of service (CPU consumption) via certain     packets that cause a large number of hash table     collisions

This advisory provides corrected source code for Linux 2.4.17, and corrected binary kernel images for the mips and mipsel architectures.
Other versions and architectures will be covered by separate advisories.

A number of vulnerabilities have been discovered in the Linux kernel.

CVE-2002-0429: The iBCS routines in arch/i386/kernel/traps.c for Linux kernels 2.4.18 and earlier on x86 systems allow local users to kill arbitrary processes via a binary compatibility interface (lcall).

CAN-2003-0001: Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets.

CAN-2003-0127: The kernel module loader allows local users to gain root privileges by using ptrace to attach to a child process that is spawned by the kernel.

CAN-2003-0244: The route cache implementation in Linux 2.4, and the Netfilter IP conntrack module, allows remote attackers to cause a denial of service (CPU consumption) via packets with forged source addresses that cause a large number of hash table collisions related to the PREROUTING chain.

CAN-2003-0246: The ioperm system call in Linux kernel 2.4.20 and earlier does not properly restrict privileges, which allows local users to gain read or write access to certain I/O ports.

CAN-2003-0247: Vulnerability in the TTY layer of the Linux kernel 2.4 allows attackers to cause a denial of service ('kernel oops').

CAN-2003-0248: The mxcsr code in Linux kernel 2.4 allows attackers to modify CPU state registers via a malformed address.

CAN-2003-0364: The TCP/IP fragment reassembly handling in the Linux kernel 2.4 allows remote attackers to cause a denial of service (CPU consumption) via certain packets that cause a large number of hash table collisions.

This advisory covers only the powerpc architecture. Other architectures will be covered by separate advisories.

A number of vulnerabilities have been discovered in the Linux kernel.

CVE-2002-0429: The iBCS routines in arch/i386/kernel/traps.c for Linux kernels 2.4.18 and earlier on x86 systems allow local users to kill arbitrary processes via a binary compatibility interface (lcall).

CAN-2003-0001: Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets.

CAN-2003-0127: The kernel module loader allows local users to gain root privileges by using ptrace to attach to a child process that is spawned by the kernel.

CAN-2003-0244: The route cache implementation in Linux 2.4, and the Netfilter IP conntrack module, allows remote attackers to cause a denial of service (CPU consumption) via packets with forged source addresses that cause a large number of hash table collisions related to the PREROUTING chain.

CAN-2003-0246: The ioperm system call in Linux kernel 2.4.20 and earlier does not properly restrict privileges, which allows local users to gain read or write access to certain I/O ports.

CAN-2003-0247: Vulnerability in the TTY layer of the Linux kernel 2.4 allows attackers to cause a denial of service ('kernel oops').

CAN-2003-0248: The mxcsr code in Linux kernel 2.4 allows attackers to modify CPU state registers via a malformed address.

CAN-2003-0364: The TCP/IP fragment reassembly handling in the Linux kernel 2.4 allows remote attackers to cause a denial of service (CPU consumption) via certain packets that cause a large number of hash table collisions.

This advisory covers only the i386 (Intel IA32) architectures. Other architectures will be covered by separate advisories.

Multiple vulnerabilities were discovered and fixed in the Linux kernel.

  - CVE-2003-0001: Multiple ethernet network card drivers do     not pad frames with null bytes which allows remote     attackers to obtain information from previous packets or     kernel memory by using special malformed packets.

  - CVE-2003-0244: The route cache implementation in the 2.4     kernel and the Netfilter IP conntrack module allows     remote attackers to cause a Denial of Service (DoS) via     CPU consumption due to packets with forged source     addresses that cause a large number of hash table     collisions related to the PREROUTING chain.

  - CVE-2003-0246: The ioperm implementation in 2.4.20 and     earlier kernels does not properly restrict privileges,     which allows local users to gain read or write access to     certain I/O ports.

  - CVE-2003-0247: A vulnerability in the TTY layer of the     2.4 kernel allows attackers to cause a kernel oops     resulting in a DoS.

  - CVE-2003-0248: The mxcsr code in the 2.4 kernel allows     attackers to modify CPU state registers via a malformed     address.

  - CVE-2003-0462: A file read race existed in the execve()     system call.

Kernels for 9.1/x86 are also available (see MDKSA-2003:066).

MandrakeSoft encourages all users to upgrade to these new kernels.

For full instructions on how to properly upgrade your kernel, please review http://www.mandrakesecure.net/en/docs/magic.php.

Multiple vulnerabilities were discovered and fixed in the Linux kernel.

  - CVE-2003-0001: Multiple ethernet network card drivers do     not pad frames with null bytes which allows remote     attackers to obtain information from previous packets or     kernel memory by using special malformed packets.

  - CVE-2003-0244: The route cache implementation in the 2.4     kernel and the Netfilter IP conntrack module allows     remote attackers to cause a Denial of Service (DoS) via     CPU consumption due to packets with forged source     addresses that cause a large number of hash table     collisions related to the PREROUTING chain.

  - CVE-2003-0246: The ioperm implementation in 2.4.20 and     earlier kernels does not properly restrict privileges,     which allows local users to gain read or write access to     certain I/O ports.

  - CVE-2003-0247: A vulnerability in the TTY layer of the     2.4 kernel allows attackers to cause a kernel oops     resulting in a DoS.

  - CVE-2003-0248: The mxcsr code in the 2.4 kernel allows     attackers to modify CPU state registers via a malformed     address.

  - CVE-2003-0462: A file read race existed in the execve()     system call.

As well, a number of bug fixes were made in the 9.1 kernel including :

  - Support for more machines that did not work with APIC

    - Audigy2 support

    - New/updated modules: prims25, adiusbadsl, thinkpad,       ieee1394, orinoco, via-rhine,

  - Fixed SiS IOAPIC

    - IRQ balancing has been fixed for SMP

    - Updates to ext3

    - The previous ptrace fix has been redone to work better

    - Bugs with compiling kernels using xconfig have been       fixed

    - Problems with ipsec have been corrected

    - XFS ACLs are now present

    - gdb not working on XFS root filesystems has been fixed

MandrakeSoft encourages all users to upgrade to these new kernels.
Updated kernels will be available shortly for other supported platforms and architectures.

For full instructions on how to properly upgrade your kernel, please review http://www.mandrakesecure.net/en/docs/magic.php.

Update :

The kernels provided in MDKSA-2003:066-1 (2.4.21-0.24mdk) had a problem where all files created on any filesystem other than XFS, and using any kernel other than kernel-secure, would be created with mode 0666, or world writeable. The 0.24mdk kernels have been removed from the mirrors and users are encouraged to upgrade and remove those kernels from their systems to prevent accidentally booting into them.

That issue has been addressed and fixed with these new kernels.

A number of vulnerabilities have been found in the Linux 2.2 kernel that have been addressed with the latest 2.2.25 release.

A bug in the kernel module loader code could allow a local user to gain root privileges. This is done by a local user using ptrace and attaching to a modprobe process that is spawned if the user triggers the loading of a kernel module.

A temporary workaround can be used to defend against this flaw. It is possible to temporarily disable the kmod kernel module loading subsystem in the kernel after all of the required kernel modules have been loaded. Be sure that you do not need to load additional kernel modules after implementing this workaround. To use it, as root execute :

echo /no/such/file >/proc/sys/kernel/modprobe

To automate this, you may wish to add it as the last line of the /etc/rc.d/rc.local file. You can revert this change by replacing the content '/sbin/modprobe' in the /proc/sys/kernel/modprobe file. The root user can still manually load kernel modules with this workaround in place.

As well, multiple ethernet device drivers do not pad frames with null bytes, which could allow remote attackers to obtain information from previous packets or kernel memory by using malformed packets.

Finally, the 2.2 kernel allows local users to cause a crash of the host system by using the mmap() function with a PROT_READ parameter to access non-readable memory pages through the /proc/pid/mem interface.

All users are encouraged to upgrade to the latest kernel version provided.

For instructions on how to upgrade your kernel in Mandrake Linux, please refer to :

http://www.mandrakesecure.net/en/kernelupdate.php

The remote host uses a network device driver that pads ethernet frames with data which vary from one packet to another, likely taken from kernel memory, system memory allocated to the device driver, or a hardware buffer on its network interface card.

Known as 'Etherleak', this information disclosure vulnerability may allow an attacker to collect sensitive information from the affected host provided he is on the same physical subnet as that host.

ID	Name	Product	Family	Severity
178646	Juniper Junos OS Multiple Vulnerabilities (JSA69720)	Nessus	Junos Local Security Checks	medium
107944	Solaris 10 (x86) : 125907-02	Nessus	Solaris Local Security Checks	medium
80936	Oracle Solaris Critical Patch Update : jan2015_SRU11_1_11_4_0	Nessus	Solaris Local Security Checks	medium
68912	Juniper Junos SRX1400/3400/3600 Etherleak Information Disclosure (JSA10579)	Nessus	Junos Local Security Checks	medium
17420	HP-UX PHNE_29267 : HPSBUX0305-261 SSRT3451 Potential Security Vulnerability in HP-UX network drivers (Data Leakage) (rev. 01)	Nessus	HP-UX Local Security Checks	medium
17417	HP-UX PHNE_28636 : HPSBUX0305-261 SSRT3451 Potential Security Vulnerability in HP-UX network drivers (Data Leakage) (rev. 01)	Nessus	HP-UX Local Security Checks	medium
16926	HP-UX PHNE_29244 : HPSBUX0305-261 SSRT3451 Potential Security Vulnerability in HP-UX network drivers (Data Leakage) (rev. 01)	Nessus	HP-UX Local Security Checks	medium
16670	HP-UX PHNE_28143 : HPSBUX0305-261 SSRT3451 Potential Security Vulnerability in HP-UX network drivers (Data Leakage) (rev. 01)	Nessus	HP-UX Local Security Checks	medium
15279	Debian DSA-442-1 : linux-kernel-2.4.17-s390 - several vulnerabilities	Nessus	Debian Local Security Checks	critical
15260	Debian DSA-423-1 : linux-kernel-2.4.17-ia64 - several vulnerabilities	Nessus	Debian Local Security Checks	high
15173	Debian DSA-336-1 : linux-kernel-2.2.20 - several vulnerabilities	Nessus	Debian Local Security Checks	critical
15169	Debian DSA-332-1 : linux-kernel-2.4.17 - several vulnerabilities	Nessus	Debian Local Security Checks	critical
15149	Debian DSA-312-1 : kernel-patch-2.4.18-powerpc - several vulnerabilities	Nessus	Debian Local Security Checks	critical
15148	Debian DSA-311-1 : linux-kernel-2.4.18 - several vulnerabilities	Nessus	Debian Local Security Checks	critical
14057	Mandrake Linux Security Advisory : kernel (MDKSA-2003:074)	Nessus	Mandriva Local Security Checks	critical
14049	Mandrake Linux Security Advisory : kernel (MDKSA-2003:066-2)	Nessus	Mandriva Local Security Checks	critical
14023	Mandrake Linux Security Advisory : kernel22 (MDKSA-2003:039)	Nessus	Mandriva Local Security Checks	high
11197	Multiple Ethernet Driver Frame Padding Information Disclosure (Etherleak)	Nessus	Misc.	low

Detections

Analytics

CVE-2003-0001

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

critical

high

critical

critical

critical

critical

critical

critical

high

low