Threats tagged 'ghsa-cq94-w9q3-ggxw'

Ettercap versions through 0.8.4.1 have a stack buffer underwrite vulnerability in the telnet dissector. This flaw occurs because the output pointer is decremented on backspace characters without checking for a lower bound, allowing attackers to corrupt the stack by sending a telnet stream with excessive backspaces. The vulnerability affects the Ettercap process, which typically runs with root privileges.