Ettercap-Project Ettercap
13 CVEs affecting Ettercap-Project Ettercap. Latest disclosed: 2026-03-05. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2010-3844 | High | 8.8 | 2019-11-12 | An unchecked sscanf() call in ettercap before 0.7.5 allows an insecure temporary settings file to overflow a static-sized buffer on the stack. |
CVE-2010-3843 | High | 7.8 | 2021-05-28 | The GTK version of ettercap uses a global settings file at /tmp/.ettercap_gtk and does not verify ownership of this file. When parsing this file for settings i… |
CVE-2017-6430 | Medium | 5.5 | 2017-03-15 | The compile_tree function in ef_compiler.c in the Etterfilter utility in Ettercap 0.8.2 and earlier allows remote attackers to cause a denial of service (out-o… |
CVE-2026-3606 | Low | 3.3 | 2026-03-05 | A vulnerability has been found in Ettercap 0.8.4-Garofalo. Affected by this vulnerability is the function add_data_segment of the file src/ettercap/utils/etter… |
CVE-2014-9381 | | 2014-12-19 | Integer signedness error in the dissector_cvs function in dissectors/ec_cvs.c in Ettercap 0.8.1 allows remote attackers to cause a denial of service (crash) vi… | |
CVE-2014-9380 | | 2014-12-19 | The dissector_cvs function in dissectors/ec_cvs.c in Ettercap 0.8.1 allows remote attackers to cause a denial of service (out-of-bounds read) via a packet cont… | |
CVE-2014-9379 | | 2014-12-19 | The radius_get_attribute function in dissectors/ec_radius.c in Ettercap 0.8.1 performs an incorrect cast, which allows remote attackers to cause a denial of se… | |
CVE-2014-9378 | | 2014-12-19 | Ettercap 0.8.1 does not validate certain return values, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code v… | |
CVE-2014-9377 | | 2014-12-19 | Heap-based buffer overflow in the nbns_spoof function in plug-ins/nbns_spoof/nbns_spoof.c in Ettercap 0.8.1 allows remote attackers to cause a denial of servic… | |
CVE-2014-9376 | | 2014-12-19 | Integer underflow in Ettercap 0.8.1 allows remote attackers to cause a denial of service (out-of-bounds write) and possibly execute arbitrary code via a small… | |
CVE-2014-6396 | | 2014-12-19 | The dissector_postgresql function in dissectors/ec_postgresql.c in Ettercap before 0.8.1 allows remote attackers to cause a denial of service and possibly exec… | |
CVE-2014-6395 | | 2014-12-19 | Heap-based buffer overflow in the dissector_postgresql function in dissectors/ec_postgresql.c in Ettercap before 0.8.1 allows remote attackers to cause a denia… | |
CVE-2013-0722 | | 2013-01-11 | Stack-based buffer overflow in the scan_load_hosts function in ec_scan.c in Ettercap 0.7.5.1 and earlier might allow local users to gain privileges via a Troja… |