CVE-2014-9379: The radius_get_attribute function in dissectors/ec_radius.c in Ettercap 0.8.1 performs an incorrect cast, w...

Security readout for executives and security teams

Ettercap 0.8.1 contains a buffer overflow in RADIUS packet parsing. A remote attacker may be able to crash the tool, and the CVE says arbitrary code execution is possible. Exposure is likely limited to systems running vulnerable Ettercap while inspecting attacker-controlled network traffic. Organizations are exposed if vulnerable Ettercap versions are installed and used to parse untrusted RADIUS or network capture traffic. This is probably concentrated on security workstations, monitoring systems, labs, and incident response environments rather than ordinary endpoints. Prioritize remediation where Ettercap is used operationally on sensitive security systems. Business risk is narrower than an internet-facing service, but compromise of analyst tooling could affect investigations or privileged environments. Mitigation focus: Upgrade Ettercap according to vendor or distribution guidance.; Review Gentoo GLSA-201505-01 if Gentoo packages are in scope.; Remove vulnerable Ettercap installations where the tool is not required..

Prepared

Jun 14, 2026, 05:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.