CVE-2010-3844

Опубликовано: 12 нояб. 2019

Источник: nvd

CVSS3: 8.8

CVSS2: 6.8

EPSS Низкий

Описание

An unchecked sscanf() call in ettercap before 0.7.5 allows an insecure temporary settings file to overflow a static-sized buffer on the stack.

Ссылки

https://access.redhat.com/security/cve/cve-2010-3844
Broken Link
Third Party Advisory
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=600130
Mailing List
Third Party Advisory
https://github.com/Ettercap/ettercap/commit/4ef3ede30181eca9add74305ad26dbcb0c3686a0
https://security-tracker.debian.org/tracker/CVE-2010-3844
Third Party Advisory
https://access.redhat.com/security/cve/cve-2010-3844
Broken Link
Third Party Advisory
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=600130
Mailing List
Third Party Advisory
https://github.com/Ettercap/ettercap/commit/4ef3ede30181eca9add74305ad26dbcb0c3686a0
https://security-tracker.debian.org/tracker/CVE-2010-3844
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ettercap-project:ettercap:0.7.3:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

EPSS

Процентиль: 67%

0.00527

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-120

Связанные уязвимости

CVE-2010-3844

CVSS3: 8.8

ubuntu

около 6 лет назад

An unchecked sscanf() call in ettercap before 0.7.5 allows an insecure temporary settings file to overflow a static-sized buffer on the stack.

CVE-2010-3844

CVSS3: 8.8

debian

около 6 лет назад

An unchecked sscanf() call in ettercap before 0.7.5 allows an insecure ...

GHSA-2jff-xpp2-45x2

github

почти 4 года назад

An unchecked sscanf() call in ettercap 0.7.3 allows an insecure temporary settings file to overflow a static-sized buffer on the stack.

EPSS

Процентиль: 67%

0.00527

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-120