CVE-2003-0927

Heap-based buffer overflow in Ethereal 0.9.15 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the SOCKS dissector.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2003-12-01

Last modified

2024-08-08

Affected products

• Ethereal (Ethereal Group)

References

• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000780
• http://secunia.com/advisories/10531
• http://www.debian.org/security/2003/dsa-407
• http://www.ethereal.com/appnotes/enpa-sa-00011.html
• http://www.mandriva.com/security/advisories?name=MDKSA-2003:114
• http://www.redhat.com/support/errata/RHSA-2003-323.html
• http://www.redhat.com/support/errata/RHSA-2003-324.html
• http://www.securityfocus.com/bid/8951
• http://www.turbolinux.com/security/TLSA-2003-64.txt
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13578
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9691