CVE-2014-6395
Ettercap < 0.8.0 - Heap-Based Buffer Overflow via PostgreSQL Password Length
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2014-6395. PoCs published by Nick Sampanis.
AI-analyzed exploit summary This exploit demonstrates multiple denial-of-service (DoS) vulnerabilities in Ettercap versions 8.0-8.1 by crafting malformed packets for various protocols (NBNS, GG, DHCP, MDNS, PostgreSQL, RADIUS). It leverages the PacketFu library to generate and send these packets to trigger crashes or resource exhaustion.
Description
Heap-based buffer overflow in the dissector_postgresql function in dissectors/ec_postgresql.c in Ettercap before 0.8.1 allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted password length value that is inconsistent with the actual length of the password.
Exploits (1)
This exploit demonstrates multiple denial-of-service (DoS) vulnerabilities in Ettercap versions 8.0-8.1 by crafting malformed packets for various protocols (NBNS, GG, DHCP, MDNS, PostgreSQL, RADIUS). It leverages the PacketFu library to generate and send these packets to trigger crashes or resource exhaustion.