CVE-2014-6396

CVE-2014-6396 describes a denial-of-service vulnerability in Ettercap before version 0.8.1, specifically within the dissector_postgresql function. A remote attacker can exploit this by sending a crafted password length, leading to a write of a null character to an arbitrary memory location, potentially causing a denial of service or arbitrary code execution. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector and low attack complexity, allowing for partial impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code, or significant community discussion, suggesting a low current threat landscape for this specific CVE.