CVE-2003-0356

Multiple off-by-one vulnerabilities in Ethereal 0.9.11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) AIM, (2) GIOP Gryphon, (3) OSPF, (4) PPTP, (5) Quake, (6) Quake2, (7) Quake3, (8) Rsync, (9) SMB, (10) SMPP, and (11) TSP dissectors, which do not properly use the tvb_get_nstringz and tvb_get_nstringz0 functions.

• CWE-193

• http://www.debian.org/security/2003/dsa-313Broken Link, Patch, Vendor Advisory
• http://www.ethereal.com/appnotes/enpa-sa-00009.htmlBroken Link, Patch, Vendor Advisory
• http://www.kb.cert.org/vuls/id/641013Third Party Advisory, US Government Resource
• http://www.mandriva.com/security/advisories?name=MDKSA-2003:067Third Party Advisory
• http://www.redhat.com/support/errata/RHSA-2003-077.htmlBroken Link
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A69Broken Link
• http://www.debian.org/security/2003/dsa-313Broken Link, Patch, Vendor Advisory
• http://www.ethereal.com/appnotes/enpa-sa-00009.htmlBroken Link, Patch, Vendor Advisory
• http://www.kb.cert.org/vuls/id/641013Third Party Advisory, US Government Resource
• http://www.mandriva.com/security/advisories?name=MDKSA-2003:067Third Party Advisory
• http://www.redhat.com/support/errata/RHSA-2003-077.htmlBroken Link
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A69Broken Link

Published

Jun 9, 2003

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2003-0350The control for listing accessibility options in the Accessi…
• CVE-2003-0351Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2003-0352Buffer overflow in a certain DCOM interface for RPC in Micro…
• CVE-2003-0353Buffer overflow in a component of SQL-DMO for Microsoft Data…
• CVE-2003-0354Unknown vulnerability in GNU Ghostscript before 7.07 allows …
• CVE-2003-0355Safari 1.0 Beta 2 (v73) and earlier does not validate the Co…
• CVE-2003-0357Multiple integer overflow vulnerabilities in Ethereal 0.9.11…
• CVE-2003-0358Buffer overflow in (1) nethack 3.4.0 and earlier, and (2) fa…
• CVE-2003-0359nethack 3.4.0 and earlier installs certain setgid binaries w…
• CVE-2003-0360Multiple buffer overflows in gPS before 1.0.0 allow attacker…
• CVE-2003-0361gPS before 1.1.0 does not properly follow the rgpsp connecti…
• CVE-2003-0362Buffer overflow in gPS before 0.10.2 may allow local users t…