CVE-2003-0356
CriticalSummary
Multiple off-by-one vulnerabilities in Ethereal 0.9.11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via various dissectors.
Risk Assessment
Attackers may exploit these vulnerabilities to disrupt system operations or gain control, posing a serious security threat to the organization.
Recommendation
It is recommended to update Ethereal to the latest version to mitigate these vulnerabilities and to monitor systems for unauthorized activities.
Original NVD description (English source)
Multiple off-by-one vulnerabilities in Ethereal 0.9.11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) AIM, (2) GIOP Gryphon, (3) OSPF, (4) PPTP, (5) Quake, (6) Quake2, (7) Quake3, (8) Rsync, (9) SMB, (10) SMPP, and (11) TSP dissectors, which do not properly use the tvb_get_nstringz and tvb_get_nstringz0 functions.