CVE-2003-0356 json
Multiple off-by-one vulnerabilities in Ethereal 0.9.11 and earlier allow remote attackers to cause a denial of service and possibly execute…
published 2003-05-30 23 y ago modified 2026-06-16 4 mo ago also EUVD-2003-0351
- cvss
- 9.8
- version 3.1, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 9.6%
- EPSS 9.6% chance of exploitation in 30 days, percentile 95%
- public exploits
- 0
- none known
Summary
Multiple off-by-one vulnerabilities in Ethereal 0.9.11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) AIM, (2) GIOP Gryphon, (3) OSPF, (4) PPTP, (5) Quake, (6) Quake2, (7) Quake3, (8) Rsync, (9) SMB, (10) SMPP, and (11) TSP dissectors, which do not properly use the tvb_get_nstringz and tvb_get_nstringz0 functions.
Patch / fix
- ethereal ethereal 0.9.12
- debian.org/security/2003/dsa-313 advisory
- ethereal.com/appnotes/enpa-sa-00009.html advisory
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2003-0356 updated
security flaw
-
Red Hat Enterprise Linux ES version 2.1 Red Hat Enterprise Linux WS version 2.1fixed: vendor fix RHSA-2003:077
-
Red Hat Linux 7.2 Red Hat Linux 7.3 Red Hat Linux 8.0 Red Hat Linux 9fixed: vendor fix RHSA-2003:203
-
Red Hat Linux Advanced Workstation 2.1fixed: vendor fix RHSA-2003:077
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
Exploit prediction
9.57% chance of exploitation in the next 30 days, higher than 95% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.1 | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Classification
- Weakness
-
- CWE-193 Off-by-one Error
References
-
debian.org
/security/2003/dsa-313
vendor-advisory, broken-link, patch
-
ethereal.com
/appnotes/enpa-sa-00009.html
broken-link, patch, vendor-advisory
-
redhat.com
/support/errata/RHSA-2003-077.html
vendor-advisory, broken-link
-
mandriva.com
/security/advisories?name=MDKSA-2003:067
vendor-advisory, third-party-advisory
-
kb.cert.org
/vuls/id/641013
third-party-advisory, us-government-resource
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A69
vdb-entry, signature, broken-link
Sources
- CVE List CVE-2003-0356
- NVD CVE-2003-0356
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.