CVE-2010-3844 An unchecked sscanf() call in ettercap before 0.7.5 allows an insecure temporary settings file to overflow a static-sized buffer on the stack.
HighCVSS 8.8
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An unchecked sscanf() call in ettercap before 0.7.5 allows an insecure temporary settings file to overflow a static-sized buffer on the stack.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/ettercap(Debian:12) | < 1:0.7.4-1 | 1:0.7.4-1 |
| debian/ettercap(Debian:13) | < 1:0.7.4-1 | 1:0.7.4-1 |
| ettercap-project ettercap | = 0.7.3 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| debian linux | = 9.0 | No fix listed |
| debian linux | = 10.0 | No fix listed |
| ettercap | = 0.7.3 | No fix listed |
References
- Debian Security Tracker CVE-2010-3844 third-party-advisory vendor-advisory
- access.redhat.com broken-link third-party-advisory
- bugs.debian.org mailing-list third-party-advisory
- github.com
- bugs.debian.org issue-tracking