CVE-2014-6396

The dissector_postgresql function in dissectors/ec_postgresql.c in Ettercap before 0.8.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted password length, which triggers a 0 character to be written to an arbitrary memory location.
Configurations

Configuration 1 (hide)

cpe:2.3:a:ettercap-project:ettercap:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2014-12-19 15:59

Updated : 2024-02-04 18:35


NVD link : CVE-2014-6396

Mitre link : CVE-2014-6396

CVE.ORG link : CVE-2014-6396


JSON object : View

Products Affected

ettercap-project

  • ettercap
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer