{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/vendors/ettercap/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:ettercap:ettercap:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-125406"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Ettercap (\u003c= 0.8.4.1)"],"_cs_severities":["high"],"_cs_tags":["vulnerability","remote-code-execution","network-security"],"_cs_type":"advisory","_cs_vendors":["Ettercap"],"content_html":"\u003cp\u003eEttercap versions through 0.8.4.1 contain a stack buffer underwrite vulnerability in the telnet dissector located in 'src/dissectors/ec_telnet.c'. The vulnerability exists because the software fails to perform a lower bound check when decrementing the output pointer in response to a backspace character. An attacker providing a malicious telnet stream containing more backspaces than preceding characters can write data below the intended stack buffer.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows for memory corruption within the Ettercap process. As Ettercap is frequently executed with root privileges, this vulnerability poses a high risk of arbitrary code execution or denial of service through process crashes.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAudit infrastructure to identify and inventory all instances of Ettercap 0.8.4.1 or earlier.\u003c/li\u003e\n\u003cli\u003ePrioritize the isolation of systems running Ettercap in untrusted network environments until a patched version is available.\u003c/li\u003e\n\u003cli\u003eImplement network-level inspection to identify anomalous telnet traffic patterns (excessive backspace characters) directed at systems running Ettercap.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-10T02:05:51Z","date_published":"2026-11-10T02:05:51Z","id":"https://feed.craftedsignal.io/briefs/2026-11-ettercap-stack-buffer-underwrite/","summary":"Ettercap versions through 0.8.4.1 are vulnerable to a stack buffer underwrite in the telnet dissector, which could allow an unauthenticated attacker to corrupt memory and potentially execute arbitrary code with root privileges.","title":"Ettercap: Stack buffer underwrite in telnet dissector (CVE-2026-125406)","url":"https://feed.craftedsignal.io/briefs/2026-11-ettercap-stack-buffer-underwrite/"}],"language":"en","title":"CraftedSignal Threat Feed - Ettercap","version":"https://jsonfeed.org/version/1.1"}