CNCVE编号：CNCVE-20020001 CVE编号： 安全级别：高 漏洞中文描述： Ettercap是一个Linux和BSD系统下的多用途数据包嗅探程序，它也已经被移植到Windows平台下。Ettercap在处理大数据包的实现上存在问题，远程攻击者可能利用这个漏洞在运行Ettercap的主机上执行任意指令。当Ettercap收到一个大的数据包并把它提交给解码程序解码时，可能发生缓冲区溢出问题，堆栈中的数据被改写，从而导致执行攻击者注入的任意指令。这种情况可能在Ettercap与一个MTU大于以太网标准值的网络接口相联系时或者Ettercap收到一个有伪造的包长度信息的数据包时发生。Ettercap通常情况下以root身份执行，并且之前版本的Ettercap也有可能受此漏洞的影响。 漏洞英文描述： Ettercap is a multipurpose packet sniffer for Linux and BSD based systems. It includes support for features such as character injection and packet filtering. Ettercap has been ported to Windows. A remotely exploitable buffer overflow condition exists in Ettercap. If a large packet is received and passed to some decoders, stack data may be overwritten, leading to execution of arbitrary code. This condition may be caused by associating Ettercap with an interface with a larger MTU than ethernet, or by sending a forged packet with a misleading data length field. Ettercap would normally be executed by the root user. Earlier versions of Ettercap may share this vulnerability. 漏洞参考： http://archives.neohapsis.com/archives/bugtraq/2002-02/0147.html 系统类型：其他 漏洞类型：缓冲区溢出