CVE-2013-0722 Stack-based buffer overflow in the scan_load_hosts function in ec_scan.c in Ettercap 0.7.5.1 and earlier might allow local users to gain privileges via a Trojan horse hosts list containing a long line...
MediumCVSS 4.4
EPSS 0.84%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Stack-based buffer overflow in the scan_load_hosts function in ec_scan.c in Ettercap 0.7.5.1 and earlier might allow local users to gain privileges via a Trojan horse hosts list containing a long line.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/ettercap(Debian:12) | < 1:0.7.5.1-2 | 1:0.7.5.1-2 |
| debian/ettercap(Debian:13) | < 1:0.7.5.1-2 | 1:0.7.5.1-2 |
| ettercap-project ettercap | <= 0.7.5.1 | No fix listed |
| ettercap-project ettercap | = 0.6.3.1 | No fix listed |
| ettercap-project ettercap | = 0.7.2 | No fix listed |
| ettercap-project ettercap | = 0.7.3 | No fix listed |
| ettercap-project ettercap | = 0.7.4 | No fix listed |
| ettercap-project ettercap | = 0.7.4.1 | No fix listed |
| ettercap-project ettercap | = 0.7.5 | No fix listed |
References
- Debian Security Tracker CVE-2013-0722 vendor-advisory
- 51731 third-party-advisory vendor-advisory
- 23945 exploit
- www.securation.com patch
- 57175 vdb-entry
- bugs.gentoo.org
- bugzilla.redhat.com
- bugs.debian.org issue-tracking