CVE-2003-0430: Medium severity Ethereal Group Ethereal vulnerability
Published Jun 18, 2003
·Updated
The SPNEGO dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service (crash) via an invalid ASN.1 value.
Affected Software
1 affected component
Ethereal Group Ethereal<=0.9.12
Remediation
Patch Available
Event History
Jun 18, 2003
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Jul 24, 2003
Data Sourced
via NVD·04:00 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2003-0430?
CVE-2003-0430 is classified as a high severity vulnerability due to its potential to cause a denial of service.
2
How does CVE-2003-0430 affect Ethereal?
CVE-2003-0430 allows remote attackers to crash Ethereal by sending an invalid ASN.1 value.
3
Which versions of Ethereal are affected by CVE-2003-0430?
CVE-2003-0430 affects Ethereal versions up to and including 0.9.12.
4
How can I mitigate CVE-2003-0430?
To mitigate CVE-2003-0430, upgrade Ethereal to a version higher than 0.9.12.
5
Is there a known exploit for CVE-2003-0430?
Yes, CVE-2003-0430 is known to be exploitable by sending specially crafted packets to the vulnerable Ethereal application.