4 matches found
CVE-2026-125405
Ettercap through 0.8.4.1 contains an out-of-bounds read vulnerability in ParseNTLMAuth in src/dissectors/echttp.c due to unvalidated NTLM message offsets. Attackers can send a crafted HTTP Authorization header observed by Ettercap to read beyond the buffer, disclosing memory or crashing the proce...
CVE-2026-125405: ettercap: Ettercap through 0.8.4.1 contains an out-of-bounds read vulnerability in Parse_NTLM_Auth() in src/dissectors/ec_http.cā¦
Ettercap through 0.8.4.1 contains an out-of-bounds read vulnerability in ParseNTLMAuth in src/dissectors/echttp.c due to unvalidated NTLM message offsets. Attackers can send a crafted HTTP Authorization header observed by Ettercap to read beyond the buffer, disclosing memory or crashing the proce...
CVE-2026-125405
Ettercap versions through 0.8.4.1 are vulnerable to an out-of-bounds read in the Parse_NTLM_Auth() function located in src/dissectors/ec_http.c. The root cause is the processing of unvalidated NTLM message offsets . An attacker can exploit this by sending a crafted HTTP Authorization header obser...
CVE-2026-125405 Ettercap through 0.8.4.1 Out-of-Bounds Read via HTTP NTLM Authentication Parsing
Ettercap through 0.8.4.1 contains an out-of-bounds read vulnerability in ParseNTLMAuth in src/dissectors/echttp.c due to unvalidated NTLM message offsets. Attackers can send a crafted HTTP Authorization header observed by Ettercap to read beyond the buffer, disclosing memory or crashing the proce...