How severe is CVE-2003-0356?

This vulnerability has a severity rating of CRITICAL with a CVSS score of 9.8 out of 10.

What type of vulnerability is CVE-2003-0356?

This is classified as CWE-193, which is a common weakness in software security.

CVE-2003-0356 - CRITICAL Severity | CVSS 9.8

Vulnerability Description

Multiple off-by-one vulnerabilities in Ethereal 0.9.11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) AIM, (2) GIOP Gryphon, (3) OSPF, (4) PPTP, (5) Quake, (6) Quake2, (7) Quake3, (8) Rsync, (9) SMB, (10) SMPP, and (11) TSP dissectors, which do not properly use the tvb_get_nstringz and tvb_get_nstringz0 functions.

Related Vulnerabilities

CVE-2001-0609

CRITICAL

CVSS:9.8(Critical)

Format string vulnerability in Infodrom cfingerd 1.4.3 and earlier allows a remote attacker to gain additional privileges via a malformed ident reply that is passed to the syslog function.

CWE-1932001

CVE-2001-1496

CRITICAL

CVSS:9.8(Critical)

Off-by-one buffer overflow in Basic Authentication in Acme Labs thttpd 1.95 through 2.20 allows remote attackers to cause a denial of service and possibly execute arbitrary code.

CWE-1932001

CVE-2002-0083

CRITICAL

CVSS:9.8(Critical)

Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges.

CWE-1932002

CVE-2002-1816

CRITICAL

CVSS:9.8(Critical)

Off-by-one buffer overflow in the sock_gets function in sockhelp.c for ATPhttpd 0.4b and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.

CWE-1932002

CVE-2003-0252

CRITICAL

CVSS:9.8(Critical)

Off-by-one error in the xlog function of mountd in the Linux NFS utils package (nfs-utils) before 1.0.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via cer...

CWE-1932003

CVE-2003-0466

CRITICAL

CVSS:9.8(Critical)

Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demonstrated in wu-ftpd 2.5.0 through 2.6.2 via commands...

CWE-1932003