CVE-2003-0081

Format string vulnerability in packet-socks.c of the SOCKS dissector for Ethereal 0.8.7 through 0...

7.5 HighFix available

Format string vulnerability in packet-socks.c of the SOCKS dissector for Ethereal 0.8.7 through 0.9.9 allows remote attackers to execute arbitrary code via SOCKS packets containing format string specifiers.

Exploit likelihood

5.82%Down 5.5 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

Record: CVE-2003-0081
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

CVE List No score

Record: CVE-2003-0081
Updated: 2026-11-02

EUVDEUVD-2003-0077 No score

Record: EUVD-2003-0077
Updated: 2026-11-03

GitHub AdvisoriesGHSA-jg8q-x5wr-cvjx No score

Format string vulnerability in packet-socks.c of the SOCKS dissector for Ethereal 0.8.7 through 0...

Record: GHSA-jg8q-x5wr-cvjx
Updated: 2026-11-02

Affected products

ethereal group ethereal

Affected packages

Affected packages
Package	Affected	Fixed
`ethereal` Debian:3.0	before 0.9.4-1woody3	0.9.4-1woody3

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2003-0081 is a high vulnerability (CVSS 7.5) in Ethereal Group Ethereal, published March 10, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.82%, the 93rd percentile. Fixed in ethereal 0.9.4-1woody3.

References

Show 9 moreShow less