Vulnerabilities > Ettercap Project > Ettercap > Medium
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2021-05-28 | CVE-2010-3843 | Classic Buffer Overflow vulnerability in Ettercap-Project Ettercap 0.7.3 The GTK version of ettercap uses a global settings file at /tmp/.ettercap_gtk and does not verify ownership of this file. | 4.6 |
2019-11-12 | CVE-2010-3844 | Classic Buffer Overflow vulnerability in multiple products An unchecked sscanf() call in ettercap before 0.7.5 allows an insecure temporary settings file to overflow a static-sized buffer on the stack. | 6.8 |
2017-03-15 | CVE-2017-6430 | Out-of-bounds Read vulnerability in Ettercap-Project Ettercap The compile_tree function in ef_compiler.c in the Etterfilter utility in Ettercap 0.8.2 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted filter. | 4.3 |
2014-12-19 | CVE-2014-9381 | Numeric Errors vulnerability in Ettercap-Project Ettercap 0.8.1 Integer signedness error in the dissector_cvs function in dissectors/ec_cvs.c in Ettercap 0.8.1 allows remote attackers to cause a denial of service (crash) via a crafted password, which triggers a large memory allocation. | 5.0 |
2014-12-19 | CVE-2014-9380 | Buffer Errors vulnerability in Ettercap-Project Ettercap 0.8.1 The dissector_cvs function in dissectors/ec_cvs.c in Ettercap 0.8.1 allows remote attackers to cause a denial of service (out-of-bounds read) via a packet containing only a CVS_LOGIN signature. | 5.0 |
2013-01-11 | CVE-2013-0722 | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Ettercap-Project Ettercap Stack-based buffer overflow in the scan_load_hosts function in ec_scan.c in Ettercap 0.7.5.1 and earlier might allow local users to gain privileges via a Trojan horse hosts list containing a long line. | 4.4 |