GLSA-200506-07 : Ettercap: Format string vulnerability
High Nessus Plugin ID 18464
SynopsisThe remote Gentoo host is missing one or more security-related patches.
DescriptionThe remote host is affected by the vulnerability described in GLSA-200506-07 (Ettercap: Format string vulnerability)
The curses_msg function of Ettercap's Ncurses-based user interface insecurely implements formatted printing.
A remote attacker could craft a malicious network flow that would result in executing arbitrary code with the rights of the user running the Ettercap tool, which is often root.
There is no known workaround at this time.
SolutionAll Ettercap users should upgrade to the latest available version:
# emerge --sync # emerge --ask --oneshot --verbose '>=net-analyzer/ettercap-0.7.3'