GHSA-cq94-w9q3-ggxwHighCVSS 8.8

Ettercap through 0.8.4.1 contains a stack buffer underwrite vulnerability in the telnet dissector...

Published
November 10, 2026
Last Modified
November 10, 2026

🔗 CVE IDs covered (1)

📋 Description

Ettercap through 0.8.4.1 contains a stack buffer underwrite vulnerability in the telnet dissector in src/dissectors/ec_telnet.c that decrements the output pointer on backspace without a lower bound check. Attackers can send a telnet stream with more backspaces than preceding characters to write below the stack buffer, corrupting the stack of the Ettercap process that normally runs as root.

🔗 References (7)