CVE-2003-0081

Format string vulnerability in packet-socks.c of the SOCKS dissector for Ethereal 0.8.7 through 0.9.9 allows remote attackers to execute arbitrary code via SOCKS packets containing format string specifiers.

CVSS Metrics

Affected Products (11)

GitHub Security Advisory GHSA-jg8q-x5wr-cvjx

Format string vulnerability in packet-socks.c of the SOCKS dissector for Ethereal 0.8.7 through 0...

References (26)

• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000627
• http://frontal2.mandriva.com/security/advisories?name=MDKSA-2003:051
• http://seclists.org/lists/fulldisclosure/2003/Mar/0080.html
• http://www.debian.org/security/2003/dsa-258 Patch, Vendor Advisory
• http://www.ethereal.com/appnotes/enpa-sa-00008.html Patch, Vendor Advisory, URL Repurposed
• http://www.guninski.com/etherre.html Exploit, Patch, Vendor Advisory
• http://www.linuxsecurity.com/advisories/gentoo_advisory-2949.html
• http://www.novell.com/linux/security/advisories/2003_019_ethereal.html
• http://www.redhat.com/support/errata/RHSA-2003-076.html
• http://www.redhat.com/support/errata/RHSA-2003-077.html
• http://www.securityfocus.com/bid/7049 Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11497
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A54
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000627
• http://frontal2.mandriva.com/security/advisories?name=MDKSA-2003:051