CVE-2026-129432
MEDIUM
NVD
CVSS Score
6.5
Severity
MEDIUM
Published
Nov 14, 2026
Vendor
unknown
Description
Ettercap through 0.8.5.1 contains a heap out-of-bounds read vulnerability in dissector_mountd() in src/dissectors/ec_mountd.c that validates RPC credential and directory lengths independently rather than against the packet end. Network-adjacent attackers can send a crafted MOUNT MNT call to read up to 100 bytes past the heap buffer, leaking memory to the console and logs.