Format string vulnerability in the curses_msg function in the Ncurses interface (ec_curses.c) for Ettercap before 0.7.3 allows remote attackers to execute arbitrary code.
http://www.vupen.com/english/advisories/2005/0670
http://www.gentoo.org/security/en/glsa/glsa-200506-07.xml