Multiple off-by-one vulnerabilities in Ethereal 0.9.11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) AIM, (2) GIOP Gryphon, (3) OSPF, (4) PPTP, (5) Quake, (6) Quake2, (7) Quake3, (8) Rsync, (9) SMB, (10) SMPP, and (11) TSP dissectors, which do not properly use the tvb_get_nstringz and tvb_get_nstringz0 functions.
References
Link | Resource |
---|---|
http://www.debian.org/security/2003/dsa-313 | Broken Link Patch Vendor Advisory |
http://www.ethereal.com/appnotes/enpa-sa-00009.html | Broken Link Patch Vendor Advisory |
http://www.kb.cert.org/vuls/id/641013 | Third Party Advisory US Government Resource |
http://www.mandriva.com/security/advisories?name=MDKSA-2003:067 | Third Party Advisory |
http://www.redhat.com/support/errata/RHSA-2003-077.html | Broken Link |
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A69 | Broken Link |
Configurations
History
16 Feb 2024, 20:39
Type | Values Removed | Values Added |
---|---|---|
References | () http://www.debian.org/security/2003/dsa-313 - Broken Link, Patch, Vendor Advisory | |
References | () http://www.ethereal.com/appnotes/enpa-sa-00009.html - Broken Link, Patch, Vendor Advisory | |
References | () http://www.kb.cert.org/vuls/id/641013 - Third Party Advisory, US Government Resource | |
References | () http://www.mandriva.com/security/advisories?name=MDKSA-2003:067 - Third Party Advisory | |
References | () http://www.redhat.com/support/errata/RHSA-2003-077.html - Broken Link | |
References | () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A69 - Broken Link | |
CPE | cpe:2.3:a:ethereal:ethereal:*:*:*:*:*:*:*:* | |
CVSS |
v2 : v3 : |
v2 : 10.0
v3 : 9.8 |
First Time |
Ethereal ethereal
Ethereal |
|
CWE | CWE-193 |
14 Feb 2024, 01:17
Type | Values Removed | Values Added |
---|---|---|
References | () http://www.ethereal.com/appnotes/enpa-sa-00009.html - Patch, Vendor Advisory, URL Repurposed |
Information
Published : 2003-06-09 04:00
Updated : 2024-02-16 20:39
NVD link : CVE-2003-0356
Mitre link : CVE-2003-0356
CVE.ORG link : CVE-2003-0356
JSON object : View
Products Affected
ethereal
- ethereal
CWE
CWE-193
Off-by-one Error