Format string vulnerability in the curses_msg function in the Ncurses interface (ec_curses.c) for Ettercap before 0.7.3 allows remote attackers to execute arbitrary code.

This advisory adds security support for the stable amd64 distribution.
It covers all security updates since the release of sarge, which were missing updated packages for the not yet official amd64 port. Future security advisories will include updates for this port as well.

A vulnerability was discovered in the ettercap package which could allow a remote attacker to execute arbitrary code on the system running ettercap.

The old stable distribution (woody) did not include ettercap.

The remote host is affected by the vulnerability described in GLSA-200506-07 (Ettercap: Format string vulnerability)

    The curses_msg function of Ettercap's Ncurses-based user interface     insecurely implements formatted printing.
  Impact :

    A remote attacker could craft a malicious network flow that would     result in executing arbitrary code with the rights of the user running     the Ettercap tool, which is often root.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
57528	Debian DSA-773-1 : amd64 - several vulnerabilities	Nessus	Debian Local Security Checks	critical
18664	Debian DSA-749-1 : ettercap - format string error	Nessus	Debian Local Security Checks	high
18464	GLSA-200506-07 : Ettercap: Format string vulnerability	Nessus	Gentoo Local Security Checks	high

Detections

Analytics

CVE-2005-1796

critical

Tenable Plugins

critical

high

high