CVE-2003-0432 Ethereal 0.9.12 and earlier does not handle certain strings properly, with unknown consequences, in the (1) BGP, (2) WTP, (3) DNS, (4) 802.11, (5) ISAKMP, (6) WSP, (7) CLNP, (8) ISIS, and (9) RMI diss...
HighCVSS 10.0
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Ethereal 0.9.12 and earlier does not handle certain strings properly, with unknown consequences, in the (1) BGP, (2) WTP, (3) DNS, (4) 802.11, (5) ISAKMP, (6) WSP, (7) CLNP, (8) ISIS, and (9) RMI dissectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ethereal group ethereal | <= 0.9.12 | No fix listed |
References
- CLA-2003:662 vendor-advisory
- 9007 third-party-advisory
- DSA-324 patch vendor-advisory
- www.ethereal.com patch url-repurposed vendor-advisory
- RHSA-2003:077 vendor-advisory
- oval:org.mitre.oval:def:106 signature vdb-entry