CVE-2013-0722

2013-01-1122:55:01

CWE-119

mitre

web.nvd.nist.gov

cve-2013-0722

ettercap

buffer overflow

security vulnerability

privilege escalation

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.9

Confidence

High

EPSS

Percentile

5.1%

JSON

Stack-based buffer overflow in the scan_load_hosts function in ec_scan.c in Ettercap 0.7.5.1 and earlier might allow local users to gain privileges via a Trojan horse hosts list containing a long line.

Affected configurations

Nvd

Node

ettercap-projectettercapRange≤0.7.5.1

ettercap-projectettercapMatch0.6.3.1

ettercap-projectettercapMatch0.7.2

ettercap-projectettercapMatch0.7.3

ettercap-projectettercapMatch0.7.4

ettercap-projectettercapMatch0.7.4.1

ettercap-projectettercapMatch0.7.5

VendorProductVersionCPE
ettercap-projectettercap*cpe:2.3:a:ettercap-project:ettercap:*:*:*:*:*:*:*:*
ettercap-projectettercap0.6.3.1cpe:2.3:a:ettercap-project:ettercap:0.6.3.1:*:*:*:*:*:*:*
ettercap-projectettercap0.7.2cpe:2.3:a:ettercap-project:ettercap:0.7.2:*:*:*:*:*:*:*
ettercap-projectettercap0.7.3cpe:2.3:a:ettercap-project:ettercap:0.7.3:*:*:*:*:*:*:*
ettercap-projectettercap0.7.4cpe:2.3:a:ettercap-project:ettercap:0.7.4:*:*:*:*:*:*:*
ettercap-projectettercap0.7.4.1cpe:2.3:a:ettercap-project:ettercap:0.7.4.1:*:*:*:*:*:*:*
ettercap-projectettercap0.7.5cpe:2.3:a:ettercap-project:ettercap:0.7.5:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ettercap-project	ettercap	*	cpe:2.3:a:ettercap-project:ettercap::::::::
ettercap-project	ettercap	0.6.3.1	cpe:2.3:a:ettercap-project:ettercap:0.6.3.1:::::::*
ettercap-project	ettercap	0.7.2	cpe:2.3:a:ettercap-project:ettercap:0.7.2:::::::*
ettercap-project	ettercap	0.7.3	cpe:2.3:a:ettercap-project:ettercap:0.7.3:::::::*
ettercap-project	ettercap	0.7.4	cpe:2.3:a:ettercap-project:ettercap:0.7.4:::::::*
ettercap-project	ettercap	0.7.4.1	cpe:2.3:a:ettercap-project:ettercap:0.7.4.1:::::::*
ettercap-project	ettercap	0.7.5	cpe:2.3:a:ettercap-project:ettercap:0.7.5:::::::*