PT-2003-1354 · Ethereal · Ethereal

Georgi Guninski · CVE-2003-0081 · Publicado 2003-03-18 · Atualizado 2024-02-14

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Ethereal versions 0.8.7 through 0.9.9

Description A format string issue in the SOCKS dissector of Ethereal allows remote attackers to execute arbitrary code via SOCKS packets containing format string specifiers.

Recommendations For Ethereal versions 0.8.7 through 0.9.9, update to a version that contains a fix for this issue to prevent remote code execution.

Exploit

Correção

Identificadores relacionados

CVE-2003-0081

DSA-258

Produtos afetados

Ethereal

Referências · 14

• 🔥 http://guninski.com/etherre.html · Exploit
• http://debian.org/security/2003/dsa-258 · Aviso do Fabricante
• http://securityfocus.com/bid/7049 · Aviso do Fabricante
• http://seclists.org/lists/fulldisclosure/2003/Mar/0080.html · Nota
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000627 · Aviso do Fabricante
• http://linuxsecurity.com/advisories/gentoo_advisory-2949.html · Aviso do Fabricante
• http://novell.com/linux/security/advisories/2003_019_ethereal.html · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11497 · Nota
• http://redhat.com/support/errata/RHSA-2003-076.html · Aviso do Fabricante
• http://redhat.com/support/errata/RHSA-2003-077.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2003-0081 · Nota de Segurança
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A54 · Nota
• http://frontal2.mandriva.com/security/advisories?name=MDKSA-2003:051 · Aviso do Fabricante
• http://ethereal.com/appnotes/enpa-sa-00008.html · Aviso do Fabricante