PSIRT Note: Etherleak CVE-2003-0001 false positive

[fropert_FTNT]

Description

The Nessus plugin "Multiple Ethernet Driver Frame Padding Information Disclosure (Etherleak)" may report the FortiGate to be vulnerable to CVE-2003-0001.

Solution

This is a false positive from the Nessus vulnerability scanner.

FortiGate devices including FortiAsic NP and Intel drivers are confirmed to be not vulnerable to CVE-2003-0001 alias Etherleak.