CVE-2026-125406

Summary

Ettercap through 0.8.4.1 has a stack buffer underwrite in its telnet dissector due to missing bounds checking when processing backspace characters, allowing an attacker to corrupt stack memory by sending a telnet stream with excessive backspaces relative to preceding data. This occurs because the output pointer is decremented without verifying it remains within the buffer bounds.

Exploitability

Exploitation requires network access to a target running Ettercap's telnet dissector (typically in a MITM role), with no authentication or user interaction needed, making it highly exploitable in compromised network segments.

Blast radius

Successful exploitation could lead to remote code execution as root since Ettercap typically runs with elevated privileges, enabling full system compromise and lateral movement within the target network.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Ettercap version 0.8.5 or later, which includes a fix for the stack buffer underwrite in the telnet dissector.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.