GLSA 200506-07: Ettercap: Format string vulnerability

http://security.gentoo.org/

Severity:	high
Title:	Ettercap: Format string vulnerability
Date:	06/11/2005
Bugs:	#94474
ID:	200506-07

Synopsis

A format string vulnerability in Ettercap could allow a remote attacker to execute arbitrary code.

Background

Ettercap is a suite of tools for content filtering, sniffing and man in the middle attacks on a LAN.

Affected packages

Package	Vulnerable	Unaffected	Architecture(s)
net-analyzer/ettercap	< 0.7.3	>= 0.7.3	All supported architectures

Description

The curses_msg function of Ettercap's Ncurses-based user interface insecurely implements formatted printing.

Impact

A remote attacker could craft a malicious network flow that would result in executing arbitrary code with the rights of the user running the Ettercap tool, which is often root.

Workaround

There is no known workaround at this time.

Resolution

All Ettercap users should upgrade to the latest available version:

    # emerge --sync
    # emerge --ask --oneshot --verbose ">=net-analyzer/ettercap-0.7.3"

References

CAN-2005-1796

Availability

This GLSA and any updates to it are available for viewing at the Gentoo Security Website: http://security.gentoo.org/glsa/glsa-200506-07.xml

Concerns?

Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org.