Back to Database
Status published
High
CVE-2014-6395
Heap-based buffer overflow in the dissector_postgresql function in dissectors/ec_postgresql.c in...
Vulnerability Description
Heap-based buffer overflow in the dissector_postgresql function in dissectors/ec_postgresql.c in Ettercap before 0.8.1 allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted password length value that is inconsistent with the actual length of the password.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-6395
Credits & Attribution
No credits recorded in the NVD database.
References
- https://security.gentoo.org/glsa/201505-01
- http://www.securityfocus.com/bid/71689
- https://www.obrela.com/home/security-labs/advisories/osi-advisory-osi-1402/
- https://github.com/Ettercap/ettercap/commit/e3abe7d7585ecc420a7cab73313216613aadad5a
- http://www.securityfocus.com/archive/1/534248/100/0/threaded
More from ettercap-project
View All →CVE-2017-6430
The compile_tree function in ef_compiler.c in the Etterfilter utility in...
Medium
5.5
CVE-2014-9381
Integer signedness error in the dissector_cvs function in dissectors/ec_cvs.c in...
Medium
5
CVE-2014-9380
The dissector_cvs function in dissectors/ec_cvs.c in Ettercap 0.8.1 allows remote...
Medium
5
CVE-2014-9379
The radius_get_attribute function in dissectors/ec_radius.c in Ettercap 0.8.1 performs an...
High
7.5
CVE-2014-9378
Ettercap 0.8.1 does not validate certain return values, which allows...
High
7.5
Affected Vendor
ettercap-project
View all reports →Affected Software
ettercap
Vulnerable Versions:
0
Timeline
Official Publish:
December 19th, 2014
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.