PT-2003-1354 · Ethereal · Ethereal

Georgi Guninski · Published 2003-03-18 · Updated 2024-02-14 · CVE-2003-0081

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Ethereal versions 0.8.7 through 0.9.9

Description A format string issue in the SOCKS dissector of Ethereal allows remote attackers to execute arbitrary code via SOCKS packets containing format string specifiers.

Recommendations For Ethereal versions 0.8.7 through 0.9.9, update to a version that contains a fix for this issue to prevent remote code execution.

Exploit

Fix

Related Identifiers

CVE-2003-0081

DSA-258

Affected Products

Ethereal

References · 14

• 🔥 http://guninski.com/etherre.html · Exploit
• http://debian.org/security/2003/dsa-258 · Vendor Advisory
• http://securityfocus.com/bid/7049 · Vendor Advisory
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000627 · Vendor Advisory
• http://linuxsecurity.com/advisories/gentoo_advisory-2949.html · Vendor Advisory
• http://novell.com/linux/security/advisories/2003_019_ethereal.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2003-076.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2003-077.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2003-0081 · Security Note
• http://frontal2.mandriva.com/security/advisories?name=MDKSA-2003:051 · Vendor Advisory
• http://ethereal.com/appnotes/enpa-sa-00008.html · Vendor Advisory
• http://seclists.org/lists/fulldisclosure/2003/Mar/0080.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11497 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A54 · Note