Stack Buffer Underwrite in Ettercap Telnet Dissector by Ettercap
CVE-2026-125406

8.7HIGH

Key Information:

Vendor

Ettercap

Status
Ettercap
Vendor
CVE Published:
9 November 2026

What is CVE-2026-125406?

The Ettercap tool up to version 0.8.4.1 features a stack buffer underwrite vulnerability in its telnet dissector. This flaw allows attackers to exploit how backspaces are handled, creating the potential to exceed the bounds of the stack buffer. By sending a crafted telnet stream with excessive backspaces, an attacker can manipulate the output pointer, leading to corruption within the stack. Consequently, this could result in detrimental behaviors for processes executing with elevated privileges, such as root. It is crucial to address this vulnerability by updating to secure versions as detailed in recent advisories.

Affected Version(s)

ettercap 0 <= 0.8.4.1

References

https://github.com/Ettercap/ettercap/security/advisories/...
vendor-advisory
https://github.com/Ettercap/ettercap/commit/1d8badb713579...
patch
https://github.com/Ettercap/ettercap/pull/1330
issue-trackingpatch

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Adiel Sol, Arad Inbar, Erez Cohen, Nir Somech, Ben Grinberg, Daniel Lubel, Shir Sadon (DREAM Security Research Team)
Emilio Escobar
.