Candidate: CVE-2010-3844 PublicDate: 2019-11-12 22:15:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3844 Description: An unchecked sscanf() call in ettercap before 0.7.5 allows an insecure temporary settings file to overflow a static-sized buffer on the stack. Ubuntu-Description: Notes: sbeattie> only an issue when in conjunction with CVE-2010-3843 sbeattie> based on that MITRE may have ignored the issue Bugs: https://bugs.launchpad.net/ubuntu/+source/ettercap/+bug/656347 Priority: low Discovered-by: Dan Rosenberg Assigned-to: CVSS: nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H [8.8 HIGH] Patches_ettercap: upstream_ettercap: released (1:0.7.4-1) hardy_ettercap: ignored (reached end-of-life) lucid_ettercap: ignored (reached end-of-life) natty_ettercap: ignored (reached end-of-life) oneiric_ettercap: ignored (reached end-of-life) precise_ettercap: ignored (reached end-of-life) precise/esm_ettercap: DNE (precise was needs-triage) quantal_ettercap: ignored (reached end-of-life) raring_ettercap: ignored (reached end-of-life) saucy_ettercap: ignored (reached end-of-life) trusty_ettercap: not-affected (1:0.8.0-11ubuntu0.3) trusty/esm_ettercap: DNE (trusty was not-affected [1:0.8.0-11ubuntu0.3]) utopic_ettercap: ignored (reached end-of-life) vivid_ettercap: ignored (reached end-of-life) vivid/stable-phone-overlay_ettercap: DNE vivid/ubuntu-core_ettercap: DNE wily_ettercap: ignored (reached end-of-life) xenial_ettercap: not-affected (1:0.8.0-11ubuntu0.3) yakkety_ettercap: ignored (reached end-of-life) zesty_ettercap: ignored (reached end-of-life) artful_ettercap: ignored (reached end-of-life) bionic_ettercap: not-affected (1:0.8.0-11ubuntu0.3) cosmic_ettercap: not-affected (1:0.8.0-11ubuntu0.3) devel_ettercap: not-affected (1:0.8.0-11ubuntu0.3)