Lucene search

K
cveMitreCVE-2014-9376
HistoryDec 19, 2014 - 3:59 p.m.

CVE-2014-9376

2014-12-1915:59:27
mitre
web.nvd.nist.gov
32
cve-2014-9376
ettercap 0.8.1
integer underflow
denial of service
code execution
nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

Low

EPSS

0.059

Percentile

93.5%

Integer underflow in Ettercap 0.8.1 allows remote attackers to cause a denial of service (out-of-bounds write) and possibly execute arbitrary code via a small (1) size variable value in the dissector_dhcp function in dissectors/ec_dhcp.c, (2) length value to the dissector_gg function in dissectors/ec_gg.c, or (3) string length to the get_decode_len function in ec_utils.c or a request without a (4) username or (5) password to the dissector_TN3270 function in dissectors/ec_TN3270.c.

Affected configurations

Nvd
Node
ettercap-projectettercapMatch0.8.1
VendorProductVersionCPE
ettercap-projectettercap0.8.1cpe:2.3:a:ettercap-project:ettercap:0.8.1:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

Low

EPSS

0.059

Percentile

93.5%