CVE

Id
7184  
CVE No.
CVE-2003-0356  
Status
Candidate  
Description
Multiple off-by-one vulnerabilities in Ethereal 0.9.11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) AIM, (2) GIOP Gryphon, (3) OSPF, (4) PPTP, (5) Quake, (6) Quake2, (7) Quake3, (8) Rsync, (9) SMB, (10) SMPP, and (11) TSP dissectors, which do not properly use the tvb_get_nstringz and tvb_get_nstringz0 functions.  
Phase
Assigned (20030529)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
42142 7184 CVE-2003-0356 CONFIRM:http://www.ethereal.com/appnotes/enpa-sa-00009.html  View
42143 7184 CVE-2003-0356 DEBIAN:DSA-313  View
42144 7184 CVE-2003-0356 URL:http://www.debian.org/security/2003/dsa-313  View
42145 7184 CVE-2003-0356 MANDRAKE:MDKSA-2003:067  View
42146 7184 CVE-2003-0356 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2003:067  View
42147 7184 CVE-2003-0356 REDHAT:RHSA-2003:077  View
42148 7184 CVE-2003-0356 URL:http://www.redhat.com/support/errata/RHSA-2003-077.html  View
42149 7184 CVE-2003-0356 CERT-VN:VU#641013  View
42150 7184 CVE-2003-0356 URL:http://www.kb.cert.org/vuls/id/641013  View
42151 7184 CVE-2003-0356 OVAL:oval:org.mitre.oval:def:69  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63413 JVNDB-2003-000139 Ethereal の複数の解析部における整数オーバーフローの脆弱性 ------------ CVE-2003-0357 7184 7.5 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000139.html  View