2003 · 16 citations · 0 references
ComputingComputer EngineeringComputer ScienceComputer SecurityNetwork SecurityOperating SystemsHardware ObfuscationInternet Protocol SecurityKernel DesignMicroarchitectural SecurityNetwork Protocol VulnerabilitiesDevice Driver VulnerabilitiesEthernetImplementation BugsInformation LeakageKernel Driver VulnerabilitiesKernel Memory ManagementKernel-managed MemoryPadding Weaknesses
Multiple platform Ethernet Network Interface Card (NIC) device drivers incorrectly handle frame padding, allowing an attacker to view slices of previously transmitted packets or portions of kernel memory. This vulnerability is the result of incorrect implementations of RFC requirements and poor programming practices, the combination of which results in several variations of this information leakage vulnerability. This bug is explored in its various manifestations through code examples and packet captures. Solutions to this flaw are provided.