CVE-2014-6395: Buffer Overflow
Published Dec 19, 2014
·Updated
Heap-based buffer overflow in the dissectorpostgresql function in dissectors/ecpostgresql.c in Ettercap before 0.8.1 allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted password length value that is inconsistent with the actual length of the password.
Affected Software
1 affected component
Ettercap-project Ettercap<=0.8.0
Event History
Dec 19, 2014
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-6395?
CVE-2014-6395 has a high severity level due to the potential for remote code execution and denial of service.
2
How do I fix CVE-2014-6395?
To fix CVE-2014-6395, upgrade to Ettercap version 0.8.1 or later.
3
What versions of Ettercap are affected by CVE-2014-6395?
CVE-2014-6395 affects all versions of Ettercap prior to 0.8.1.
4
What type of attack is associated with CVE-2014-6395?
CVE-2014-6395 is associated with remote code execution and denial of service attacks.
5
What is the cause of CVE-2014-6395?
CVE-2014-6395 is caused by a heap-based buffer overflow in the dissector_postgresql function.