Description
Format string vulnerability in packet-socks.c of the SOCKS dissector for Ethereal 0.8.7 through 0.9.9 allows remote attackers to execute arbitrary code via SOCKS packets containing format string specifiers.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 3.0 | ethereal | 0.9.4-1woody3 | DSA-258 |
Advisories 1
- DSA-258 ethereal - format string vulnerability Debian Security (DSA / DLA) · Mar 9, 2026
References
- RHSA-2003:077 vendor-advisory
- SuSE-SA:2003:019 vendor-advisory
- http://www.ethereal.com/appnotes/enpa-sa-00008.html
- GLSA-200303-10 vendor-advisory
- ethereal-socks-format-string(11497) vdb-entry
- 20030308 Ethereal format string bug, yet still ethereal much better than windows mailing-list
- CLSA-2003:627 vendor-advisory
- MDKSA-2003:051 vendor-advisory
- RHSA-2003:076 vendor-advisory
- DSA-258 vendor-advisory
- http://www.guninski.com/etherre.html
- oval:org.mitre.oval:def:54 vdb-entry signature
- 7049 vdb-entry