CVE-2003-0159: Ethereal Group Ethereal

High severity, CVSS 7.5. EPSS: 3.8% chance of exploitation in the next 30 days.

Heap-based buffer overflow in the NTLMSSP code for Ethereal 0.9.9 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code.

Affected products

• Ethereal Group Ethereal: version 0.8.18 only; version 0.9.0 only; version 0.9.1 only; version 0.9.2 only; version 0.9.3 only; version 0.9.4 only; …

Published 2003-04-02. Last modified 2026-06-16.