CVE-2003-0432: Critical severity Ethereal Group Ethereal vulnerability
Published Jun 18, 2003
·Updated
Ethereal 0.9.12 and earlier does not handle certain strings properly, with unknown consequences, in the (1) BGP, (2) WTP, (3) DNS, (4) 802.11, (5) ISAKMP, (6) WSP, (7) CLNP, (8) ISIS, and (9) RMI dissectors.
Affected Software
1 affected component
Ethereal Group Ethereal<=0.9.12
Remediation
Patch Available
Patch Available
Event History
Jun 18, 2003
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Jul 24, 2003
Data Sourced
via NVD·04:00 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2003-0432?
CVE-2003-0432 is considered to be a moderate severity vulnerability due to potential handling errors in various dissectors.
2
How do I fix CVE-2003-0432?
To fix CVE-2003-0432, upgrade Ethereal to version 0.9.13 or later.
3
What issues does CVE-2003-0432 introduce?
CVE-2003-0432 may lead to improper handling of strings in multiple protocols, resulting in undefined behavior.
4
Which versions of Ethereal are affected by CVE-2003-0432?
Ethereal versions up to and including 0.9.12 are affected by CVE-2003-0432.
5
Can CVE-2003-0432 be exploited remotely?
Yes, CVE-2003-0432 could potentially allow exploitation through specially crafted packets processed by the affected dissectors.