CVE-2003-0159

Heap-based buffer overflow in the NTLMSSP code for Ethereal 0.9.9 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code.

• http://marc.info/?l=bugtraq&m=104741640924709&w=2
• http://www.ethereal.com/appnotes/enpa-sa-00008.htmlPatch, Vendor Advisory, URL Repurposed
• http://www.mandriva.com/security/advisories?name=MDKSA-2003:051
• http://www.novell.com/linux/security/advisories/2003_019_ethereal.html
• http://www.redhat.com/support/errata/RHSA-2003-077.html
• http://www.securityfocus.com/bid/7050Patch, Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A55
• http://marc.info/?l=bugtraq&m=104741640924709&w=2
• http://www.ethereal.com/appnotes/enpa-sa-00008.htmlPatch, Vendor Advisory, URL Repurposed
• http://www.mandriva.com/security/advisories?name=MDKSA-2003:051
• http://www.novell.com/linux/security/advisories/2003_019_ethereal.html
• http://www.redhat.com/support/errata/RHSA-2003-077.html
• http://www.securityfocus.com/bid/7050Patch, Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A55

Published

Apr 2, 2003

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2003-0153bonsai Mozilla CVS query tool leaks the absolute pathname of…
• CVE-2003-0154Cross-site scripting vulnerabilities (XSS) in bonsai Mozilla…
• CVE-2003-0155bonsai Mozilla CVS query tool allows remote attackers to gai…
• CVE-2003-0156Directory traversal vulnerability in Cross-Referencing Linux…
• CVE-2003-0157Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2003-0158Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2003-0160Multiple cross-site scripting (XSS) vulnerabilities in Squir…
• CVE-2003-0161The prescan() function in the address parser (parseaddr.c) i…
• CVE-2003-0162Ecartis 1.0.0 (formerly listar) before snapshot 20030227 all…
• CVE-2003-0163decrypt_msg for the Gaim-Encryption GAIM plugin 1.15 and ear…
• CVE-2003-0165Format string vulnerability in Eye Of Gnome (EOG) allows att…
• CVE-2003-0166Integer signedness error in emalloc() function for PHP befor…