CVE-2014-6395

CVE-2014-6395 describes a heap-based buffer overflow in Ettercap versions prior to 0.8.1, specifically within the PostgreSQL dissector function. This vulnerability allows remote attackers to trigger a denial of service or potentially execute arbitrary code by manipulating the password length value in a crafted PostgreSQL packet. With a CVSS score of 7.5, it is considered highly severe due to its network-based attack vector, low attack complexity, and potential for both denial of service and arbitrary code execution. While no active exploitation has been confirmed and it is not on the KEV catalog, a proof-of-concept for denial of service exists on ExploitDB, though there is minimal community discussion or media coverage surrounding this CVE.