CVE-2026-125405

HIGH 8.1

Ettercap through 0.8.4.1 Out-of-Bounds Read via HTTP NTLM Authentication Parsing

CVSS Score

8.1

EPSS Score

0.0%

EPSS Percentile

0th

Ettercap through 0.8.4.1 contains an out-of-bounds read vulnerability in Parse_NTLM_Auth() in src/dissectors/ec_http.c due to unvalidated NTLM message offsets. Attackers can send a crafted HTTP Authorization header observed by Ettercap to read beyond the buffer, disclosing memory or crashing the process.

CWE	CWE-125
Vendor	ettercap
Product	ettercap
Published	Nov 9, 2026

Stay Ahead of the Next One

Get instant alerts for ettercap ettercap

Be the first to know when new high vulnerabilities affecting ettercap ettercap are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

High

Affected Versions

Ettercap / ettercap

0 ≤ 0.8.4.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/Ettercap/ettercap/security/advisories/GHSA-jw9q-j2rm-94j2 github.com: https://github.com/Ettercap/ettercap/commit/1d8badb713579419a29a494bb463a1af59707e98 github.com: https://github.com/Ettercap/ettercap/pull/1330 github.com: https://github.com/Ettercap/ettercap/blob/v0.8.4.1/src/dissectors/ec_http.c#L505-L512 vulncheck.com: https://www.vulncheck.com/advisories/ettercap-through-0.8.4.1-out-of-bounds-read-via-http-ntlm-authentication-parsing

Credits

Adiel Sol, Arad Inbar, Erez Cohen, Nir Somech, Ben Grinberg, Daniel Lubel, Shir Sadon (DREAM Security Research Team) Emilio Escobar