The dissector_cvs function in dissectors/ec_cvs.c in Ettercap 0.8.1 allows remote attackers to cause a denial of service (out-of-bounds read) via a packet containing only a CVS_LOGIN signature.

The remote host is affected by the vulnerability described in GLSA-201505-01 (Ettercap: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Ettercap. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could possibly execute arbitrary code with the       privileges of the process or cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

Patches a bunch of security vulnerabilities :

  - CVE-2014-9380 (Buffer over-read)

  - CVE-2014-9381 (Signedness error) See:
    https://www.obrela.com/home/security-labs/advisories/osi
    -advisory-osi-1402/ Patches taken from upstream

  - 6b196e011fa456499ed4650a360961a2f1323818 pull/608

  - 31b937298c8067e6b0c3217c95edceb983dfc4a2 pull/609 Thanks     to Nick Sampanis <n.sampanis@obrela.com> who is     responsible for both finding and repairing these issues.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Fix for multiple CVEs.

https://www.obrela.com/home/security-labs/advisories/osi-advisory-osi- 1402/

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
83443	GLSA-201505-01 : Ettercap: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
82109	Debian DLA-126-1 : ettercap security update	Nessus	Debian Local Security Checks	medium
80342	Fedora 19 : ettercap-0.8.1-2.fc19 (2014-17210)	Nessus	Fedora Local Security Checks	high
80341	Fedora 20 : ettercap-0.8.1-2.fc20 (2014-17107)	Nessus	Fedora Local Security Checks	high
80340	Fedora 21 : ettercap-0.8.1-2.fc21 (2014-17090)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2014-9380

high

Tenable Plugins

high

medium

high

high

high