https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 13:50:52 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-04613 bdu:2021-04613 https://cve.radiocsirt.org/vuln/bdu:2021-04613 https://cve.radiocsirt.org/vuln/euvd-2026-120235 EUVD-2026-120235 https://cve.radiocsirt.org/vuln/euvd-2026-120235 https://cve.radiocsirt.org/vuln/fkie_cve-2010-3843 <p>The GTK version of ettercap uses a global settings file at /tmp/.ettercap_gtk and does not verify ownership of this file. When parsing this file for settings in gtkui_conf_read() (src/interfacesgtk/ec_gtk_conf.c), an unchecked sscanf() call allows a maliciously placed settings file to overflow a statically-sized buffer on the stack.</p> <p>The GTK version of ettercap uses a global settings file at /tmp/.ettercap_gtk and does not verify ownership of this file. When parsing this file for settings in gtkui_conf_read() (src/interfacesgtk/ec_gtk_conf.c), an unchecked sscanf() call allows a maliciously placed settings file to overflow a statically-sized buffer on the stack.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2010-3843 https://cve.radiocsirt.org/vuln/ghsa-2w85-hj5c-563j <p>The gtkui_conf_read function in src/interfaces/gtk/ec_gtk_conf.c in Ettercap 0.7.3, when the GTK interface is used, does not ensure that the contents of the .ettercap_gtk file are controlled by the root user, which allows local users to conduct stack-based buffer overflow attacks and possibly execute arbitrary code, cause a denial of service (memory consumption), or possibly have unspecified other impact via crafted lines in this file.</p> <p>The gtkui_conf_read function in src/interfaces/gtk/ec_gtk_conf.c in Ettercap 0.7.3, when the GTK interface is used, does not ensure that the contents of the .ettercap_gtk file are controlled by the root user, which allows local users to conduct stack-based buffer overflow attacks and possibly execute arbitrary code, cause a denial of service (memory consumption), or possibly have unspecified other impact via crafted lines in this file.</p> https://cve.radiocsirt.org/vuln/ghsa-2w85-hj5c-563j https://cve.radiocsirt.org/vuln/gsd-2010-3843 gsd-2010-3843 https://cve.radiocsirt.org/vuln/gsd-2010-3843 https://cve.radiocsirt.org/vuln/ubuntu-cve-2010-3843 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: ettercap</p> <p>The GTK version of ettercap uses a global settings file at /tmp/.ettercap_gtk and does not verify ownership of this file. When parsing this file for settings in gtkui_conf_read() (src/interfacesgtk/ec_gtk_conf.c), an unchecked sscanf() call allows a maliciously placed settings file to overflow a statically-sized buffer on the stack.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: ettercap</p> <p>The GTK version of ettercap uses a global settings file at /tmp/.ettercap_gtk and does not verify ownership of this file. When parsing this file for settings in gtkui_conf_read() (src/interfacesgtk/ec_gtk_conf.c), an unchecked sscanf() call allows a maliciously placed settings file to overflow a statically-sized buffer on the stack.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2010-3843