CVE-2013-0722: Buffer Overflow
A stack-based buffer overflow was reported [1],[2] in Ettercap <= 0.7.5.1. A boundary error within the scanloadhosts() function (in src/ecscan.c), when parsing entries from a hosts list, could be exploited to cause a stack-based buffer overflow via an overly long entry. In order to exploit this, a user must be tricked into loading a malicious host file.
This has not yet been corrected upstream, but a proposed patch is available [3].
The initial report [1] indicates that this was given the name CVE-2012-0722.
[1] http://www.exploit-db.com/exploits/23945/ [2] https://secunia.com/advisories/51731/ [3] http://www.securation.com/files/2013/01/ec.patch
Other sources
Stack-based buffer overflow in the scanloadhosts function in ecscan.c in Ettercap 0.7.5.1 and earlier might allow local users to gain privileges via a Trojan horse hosts list containing a long line.
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-0722?
CVE-2013-0722 has a high severity due to the potential for remote code execution through a stack-based buffer overflow.
How do I fix CVE-2013-0722?
To mitigate CVE-2013-0722, upgrade Ettercap to version 0.7.5.2 or later.
What versions are affected by CVE-2013-0722?
CVE-2013-0722 affects Ettercap versions up to and including 0.7.5.1.
What is the nature of the vulnerability in CVE-2013-0722?
CVE-2013-0722 is a stack-based buffer overflow caused by improper handling of overly long entries in a hosts list.
Can CVE-2013-0722 be exploited remotely?
Yes, CVE-2013-0722 can be exploited remotely if an attacker can send specially crafted input to the affected software.