Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The GTK version of ettercap uses a global settings file at /tmp/.ettercap_gtk and does not verify ownership of this file. When parsing this file for settings in gtkui_conf_read() (src/interfacesgtk/ec_gtk_conf.c), an unchecked sscanf() call allows a maliciously placed settings file to overflow a statically-sized buffer on the stack.
CVSS Information
N/A
Vulnerability Type
跨界内存写
Vulnerability Title
Ettercap 缓冲区错误漏洞
Vulnerability Description
Ettercap是开源的一个针对中间人攻击的综合套件。它具有嗅探实时连接、动态内容过滤的功能。 Ettercap GTK中存在缓冲区错误漏洞。成功的利用临时文件创建漏洞，攻击者可在受影响应用程序上下文中覆盖任意文件并执行符号链接攻击，或其他形式的攻击。利用格式化字符串漏洞，攻击者可在应用程序上下文中执行任意代码，或导致拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A