https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T13:56:43.926019+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-04613 bdu:2021-04613 2026-10-10T13:56:44.004462+00:00 bdu:2021-04613 https://cve.radiocsirt.org/vuln/euvd-2026-120235 EUVD-2026-120235 2026-10-10T13:56:44.004501+00:00 EUVD-2026-120235 https://cve.radiocsirt.org/vuln/fkie_cve-2010-3843 fkie_cve-2010-3843 2026-10-10T13:56:44.004516+00:00

The GTK version of ettercap uses a global settings file at /tmp/.ettercap_gtk and does not verify ownership of this file. When parsing this file for settings in gtkui_conf_read() (src/interfacesgtk/ec_gtk_conf.c), an unchecked sscanf() call allows a maliciously placed settings file to overflow a statically-sized buffer on the stack.

 https://cve.radiocsirt.org/vuln/ghsa-2w85-hj5c-563j GHSA-2w85-hj5c-563j 2026-10-10T13:56:44.004554+00:00

The gtkui_conf_read function in src/interfaces/gtk/ec_gtk_conf.c in Ettercap 0.7.3, when the GTK interface is used, does not ensure that the contents of the .ettercap_gtk file are controlled by the root user, which allows local users to conduct stack-based buffer overflow attacks and possibly execute arbitrary code, cause a denial of service (memory consumption), or possibly have unspecified other impact via crafted lines in this file.

 https://cve.radiocsirt.org/vuln/gsd-2010-3843 gsd-2010-3843 2026-10-10T13:56:44.004573+00:00 gsd-2010-3843 https://cve.radiocsirt.org/vuln/ubuntu-cve-2010-3843 Withdrawn: UBUNTU-CVE-2010-3843 2026-10-10T13:56:44.004584+00:00

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: ettercap

The GTK version of ettercap uses a global settings file at /tmp/.ettercap_gtk and does not verify ownership of this file. When parsing this file for settings in gtkui_conf_read() (src/interfacesgtk/ec_gtk_conf.c), an unchecked sscanf() call allows a maliciously placed settings file to overflow a statically-sized buffer on the stack.