Multiple vulnerabilities have been found in Ettercap, the worst of which allows remote attackers to execute arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-analyzer/ettercap | * | < 0.8.2 | >= 0.8.2 |
Ettercap is a comprehensive suite for man in the middle attacks.
Multiple vulnerabilities have been discovered in Ettercap. Please review the CVE identifiers referenced below for details.
A remote attacker could possibly execute arbitrary code with the privileges of the process or cause a Denial of Service condition.
There is no known workaround at this time.
All Ettercap users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/ettercap-0.8.2"
Multiple vulnerabilities have been found in Ettercap, the worst of which may allow execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-analyzer/ettercap | * | < 0.7.5.2 | >= 0.7.5.2 |
Ettercap is a suite of tools for content filtering, sniffing and man in the middle attacks on a LAN.
Multiple vulnerabilities have been discovered in Ettercap:
A remote attacker could entice a user to load a specially crafted configuration file using Ettercap, possibly resulting in execution of arbitrary code with the privileges of the process or a Denial of Service condition.
A local attacker could perform symlink attacks to overwrite arbitrary files with the privileges of the user running the application.
There is no known workaround at this time.
All Ettercap users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/ettercap-0.7.5.2"
A format string vulnerability in Ettercap could allow a remote attacker to execute arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-analyzer/ettercap | * | < 0.7.3 | >= 0.7.3 |
Ettercap is a suite of tools for content filtering, sniffing and man in the middle attacks on a LAN.
The curses_msg function of Ettercap's Ncurses-based user interface insecurely implements formatted printing.
A remote attacker could craft a malicious network flow that would result in executing arbitrary code with the rights of the user running the Ettercap tool, which is often root.
There is no known workaround at this time.
All Ettercap users should upgrade to the latest available version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-analyzer/ettercap-0.7.3"