Threats tagged 'ghsa-8mv7-vr8p-hqhj'

Ettercap versions through 0.8.5.1 have a heap out-of-bounds read vulnerability in the dissector_mountd() function. This flaw occurs because the function independently validates RPC credential and directory lengths without ensuring they do not exceed the packet boundary. An attacker on the network can exploit this by sending a crafted MOUNT MNT call, causing the program to read up to 100 bytes beyond the heap buffer and leak memory contents to the console and logs.