CVE-2010-3843

The GTK version of ettercap uses a global settings file at /tmp/.ettercapgtk and does not verify ownership of this file. When parsing this file for settings in gtkuiconfread src/interfacesgtk/ecgtkconf.c, an unchecked sscanf call allows a maliciously placed settings file to overflow a...

CVE-2010-3844

An unchecked sscanf call in ettercap before 0.7.5 allows an insecure temporary settings file to overflow a static-sized buffer on the stack...