Lucene search

K
cve[email protected]CVE-2014-6395
HistoryDec 19, 2014 - 3:59 p.m.

CVE-2014-6395

2014-12-1915:59:06
CWE-119
web.nvd.nist.gov
22
cve-2014-6395
ettercap
buffer overflow
denial of service
remote attack
nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.3 High

AI Score

Confidence

High

0.695 Medium

EPSS

Percentile

98.0%

Heap-based buffer overflow in the dissector_postgresql function in dissectors/ec_postgresql.c in Ettercap before 0.8.1 allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted password length value that is inconsistent with the actual length of the password.

Affected configurations

NVD
Node
ettercap-projectettercapRange0.8.0

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.3 High

AI Score

Confidence

High

0.695 Medium

EPSS

Percentile

98.0%