Stack-based buffer overflow in the scan_load_hosts function in ec_scan.c in Ettercap 0.7.5.1 and earlier might allow local users to gain privileges via a Trojan horse hosts list containing a long line.

The remote host is affected by the vulnerability described in GLSA-201405-12 (Ettercap: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Ettercap:
      Ettercap does not handle temporary files securely (CVE-2010-3843).
      A format string flaw in Ettercap could cause a buffer overflow         (CVE-2010-3844).
      A stack-based buffer overflow exists in Ettercap (CVE-2013-0722).
  Impact :

    A remote attacker could entice a user to load a specially crafted       configuration file using Ettercap, possibly resulting in execution of       arbitrary code with the privileges of the process or a Denial of Service       condition.
    A local attacker could perform symlink attacks to overwrite arbitrary       files with the privileges of the user running the application.
  Workaround :

    There is no known workaround at this time.

Fix for ncurses crash. Fix for CVE-2013-0722

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fix for CVE-2013-0722

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Host target list parsing routine in ettercap 0.7.4-series prior to 0.7.4.1 and 0.7.5-series is prone to the stack-based buffer overflow that may lead to the code execution with the privileges of the ettercap process.

In order to trigger this vulnerability, user or service that use ettercap should be tricked to pass the crafted list of targets via the '-j' option.

ID	Name	Product	Family	Severity
74055	GLSA-201405-12 : Ettercap: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
64415	Fedora 17 : ettercap-0.7.5-4.fc17.1.20120906gitc796e5 (2013-1421)	Nessus	Fedora Local Security Checks	medium
64400	Fedora 18 : ettercap-0.7.5.1-1.fc18 (2013-0899)	Nessus	Fedora Local Security Checks	medium
64399	Fedora 16 : ettercap-0.7.5-3.fc16.1.20120906gitc796e5 (2013-0894)	Nessus	Fedora Local Security Checks	medium
63588	FreeBSD : ettercap -- buffer overflow in target list parsing (1b9b199f-5efd-11e2-a1ee-c48508086173)	Nessus	FreeBSD Local Security Checks	medium

Detections

Analytics

CVE-2013-0722

high

Tenable Plugins

high

medium

medium

medium

medium