Lucene search

K
prionPRIOn knowledge basePRION:CVE-2010-3843
HistoryMay 28, 2021 - 1:15 p.m.

Buffer overflow

2021-05-2813:15:00
PRIOn knowledge base
www.prio-n.com
4

7.2 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.2%

The GTK version of ettercap uses a global settings file at /tmp/.ettercap_gtk and does not verify ownership of this file. When parsing this file for settings in gtkui_conf_read() (src/interfacesgtk/ec_gtk_conf.c), an unchecked sscanf() call allows a maliciously placed settings file to overflow a statically-sized buffer on the stack.

CPENameOperatorVersion
ettercapeq0.7.3

7.2 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.2%