Executive Summary

Informations
Name	CVE-2003-0159	First vendor Publication	2003-04-02
Vendor	Cve	Last vendor Modification	2008-09-10

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:P/I:P/A:P)
Cvss Base Score	7.5	Attack Range	Network
Cvss Impact Score	6.4	Attack Complexity	Low
Cvss Expoit Score	10	Authentification	None Required
Calculate full CVSS 2.0 Vectors scores

Security Protection

Impacts

Provides unauthorized access : Allows partial confidentiality, integrity, and availability violation; Allows unauthorized disclosure of information; Allows disruption of service.

Detail

Heap-based buffer overflow in the NTLMSSP code for Ethereal 0.9.9 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0159

OVAL Definitions

 

Definition Id: oval:org.mitre.oval:def:55
Oval ID:	oval:org.mitre.oval:def:55
Title:	Ethereal NTLMSSP Buffer Overflow
Description:	Heap-based buffer overflow in the NTLMSSP code for Ethereal 0.9.9 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2003-0159	Version:	2
Platform(s):	Red Hat Linux 9	Product(s):	Ethereal
Definition Synopsis:
Red Hat 9 is installed AND ix86 architecture AND ethereal version is less than 0.9.11-0.90.1

CPE : Common Platform Enumeration

Type	Description	Count
Application	Ethereal Group Ethereal cpe:/a:ethereal_group:ethereal:0.9.9 cpe:/a:ethereal_group:ethereal:0.9.8 cpe:/a:ethereal_group:ethereal:0.9.7 cpe:/a:ethereal_group:ethereal:0.9.6 cpe:/a:ethereal_group:ethereal:0.9.5 cpe:/a:ethereal_group:ethereal:0.9.4 cpe:/a:ethereal_group:ethereal:0.9.3 cpe:/a:ethereal_group:ethereal:0.9.2 cpe:/a:ethereal_group:ethereal:0.9.1 cpe:/a:ethereal_group:ethereal:0.9.0 cpe:/a:ethereal_group:ethereal:0.8.18	11

Open Source Vulnerability Database (OSVDB)

id	Description
4465	Ethereal NTLMSSP Dissector Overflow

Internal Sources (Detail)

Source	Url
BID	http://www.securityfocus.com/bid/7050
BUGTRAQ	http://marc.theaimsgroup.com/?l=bugtraq&m=104741640924709&w=2
CONFIRM	http://www.ethereal.com/appnotes/enpa-sa-00008.html
MANDRAKE	http://www.mandriva.com/security/advisories?name=MDKSA-2003:051
REDHAT	http://www.redhat.com/support/errata/RHSA-2003-077.html
SUSE	http://www.novell.com/linux/security/advisories/2003_019_ethereal.html

Alert History

Date	Informations
2013-05-11 11:50:47	Multiple Updates