{"id":"CVE-2003-0432","aliases":["DSA-324","EUVD-2003-0426","GHSA-p845-4v57-x54v"],"status":"published","title":"Ethereal 0.9.12 and earlier does not handle certain strings properly, with unknown consequences,...","description":"Ethereal 0.9.12 and earlier does not handle certain strings properly, with unknown consequences, in the (1) BGP, (2) WTP, (3) DNS, (4) 802.11, (5) ISAKMP, (6) WSP, (7) CLNP, (8) ISIS, and (9) RMI dissectors.","severity":{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.02261,"percentile":0.83089,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2003-06-18T00:00:00Z","modified":"2026-06-16T22:02:11Z","affected":[{"source":"osv","ecosystem":"Debian:3.0","package":"ethereal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.4-1woody5"}]}],"bundled":4}],"products":[{"vendor":"ethereal_group","product":"ethereal"}],"references":[{"url":"ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-030.0.txt","tags":["vendor-advisory","x_refsource_SCO","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A106","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-077.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a\u0026anuncio=000662","tags":["vendor-advisory","x_refsource_CONECTIVA","x_transferred"]},{"url":"http://www.debian.org/security/2003/dsa-324","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/9007","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.ethereal.com/appnotes/enpa-sa-00010.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","URL Repurposed"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2003-0432"},{"url":"https://github.com/advisories/GHSA-p845-4v57-x54v"}],"sources":{"cve":[{"id":"CVE-2003-0432","description":"Ethereal 0.9.12 and earlier does not handle certain strings properly, with unknown consequences, in the (1) BGP, (2) WTP, (3) DNS, (4) 802.11, (5) ISAKMP, (6) WSP, (7) CLNP, (8) ISIS, and (9) RMI dissectors.","status":"published","published":"2003-06-18T04:00:00Z","modified":"2024-08-08T01:50:48.099Z","updated_at":"2026-11-02T14:20:16.411288Z"}],"euvd":[{"id":"EUVD-2003-0426","description":"Ethereal 0.9.12 and earlier does not handle certain strings properly, with unknown consequences, in the (1) BGP, (2) WTP, (3) DNS, (4) 802.11, (5) ISAKMP, (6) WSP, (7) CLNP, (8) ISIS, and (9) RMI dissectors.","status":"published","published":"2003-06-18T04:00:00Z","modified":"2024-08-08T01:50:48Z","updated_at":"2026-11-03T01:15:07.267875Z"}],"ghsa":[{"id":"GHSA-p845-4v57-x54v","title":"Ethereal 0.9.12 and earlier does not handle certain strings properly, with unknown consequences,...","description":"Ethereal 0.9.12 and earlier does not handle certain strings properly, with unknown consequences, in the (1) BGP, (2) WTP, (3) DNS, (4) 802.11, (5) ISAKMP, (6) WSP, (7) CLNP, (8) ISIS, and (9) RMI dissectors.","status":"published","published":"2022-05-03T03:09:42Z","modified":"2023-02-01T05:01:04Z","updated_at":"2026-11-02T14:49:39.648637Z"}],"nvd":[{"id":"CVE-2003-0432","description":"Ethereal 0.9.12 and earlier does not handle certain strings properly, with unknown consequences, in the (1) BGP, (2) WTP, (3) DNS, (4) 802.11, (5) ISAKMP, (6) WSP, (7) CLNP, (8) ISIS, and (9) RMI dissectors.","status":"published","published":"2003-07-24T04:00:00Z","modified":"2026-06-16T22:02:11.62Z","cvss":[{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:00:46.710758Z"}],"osv":[{"id":"DSA-324","title":"ethereal - several vulnerabilities","status":"published","published":"2003-06-18T00:00:00Z","modified":"2026-03-09T01:18:09.74754Z","updated_at":"2026-11-02T15:46:15.843838Z"}]}}