CVE-2010-3843

Katalog CVE

CVSS 7.8 · High EPSS 0,31%

Kerentanan Out-of-bounds Write pada ettercap-project ettercap. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

The GTK version of ettercap uses a global settings file at /tmp/.ettercap_gtk and does not verify ownership of this file. When parsing this file for settings in gtkui_conf_read() (src/interfacesgtk/ec_gtk_conf.c), an unchecked sscanf() call allows a maliciously placed settings file to overflow a statically-sized buffer on the stack.

Rincian

Terbit di NVD

28 Mei 2021

Terakhir diubah

16 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,31% peluang dieksploitasi; lebih tinggi dari 22,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugs.launchpad.net/ubuntu/+source/ettercap/+bug/656347 patch · advisory pihak ketiga
• https://bugzilla.redhat.com/show_bug.cgi?id=643453 issue tracking · advisory pihak ketiga
• http://article.gmane.org/gmane.comp.security.oss.general/3660