CVEvulnerability
CVE-2013-0722
4.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-01-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.4 MEDIUM — AV:L/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-119
Description
Stack-based buffer overflow in the scan_load_hosts function in ec_scan.c in Ettercap 0.7.5.1 and earlier might allow local users to gain privileges via a Trojan horse hosts list containing a long line.
Affected configurations
• ettercap-project ettercap (<= 0.7.5.1)
• ettercap-project ettercap 0.6.3.1
• ettercap-project ettercap 0.7.2
• ettercap-project ettercap 0.7.3
• ettercap-project ettercap 0.7.4
• ettercap-project ettercap 0.7.4.1
• ettercap-project ettercap 0.7.5
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://secunia.com/advisories/51731 Vendor Advisory
- http://www.exploit-db.com/exploits/23945/ Exploit
- http://www.securation.com/files/2013/01/ec.patch Patch
- http://www.securityfocus.com/bid/57175 www.securityfocus.com
- https://bugs.gentoo.org/show_bug.cgi?id=451198 bugs.gentoo.org
- https://bugzilla.redhat.com/show_bug.cgi?id=894092 bugzilla.redhat.com
- http://secunia.com/advisories/51731 Vendor Advisory
- http://www.exploit-db.com/exploits/23945/ Exploit
- http://www.securation.com/files/2013/01/ec.patch Patch
- http://www.securityfocus.com/bid/57175 www.securityfocus.com
- https://bugs.gentoo.org/show_bug.cgi?id=451198 bugs.gentoo.org
- https://bugzilla.redhat.com/show_bug.cgi?id=894092 bugzilla.redhat.com