Ettercap/ettercap — pull request #110 by jacob-baines (2013-03-10 00:18:06+00:00)
Title: Segmentation Fault in ec_http.c

ec_http.c:Parse_Basic_Auth calls strdup on a pointer without checking if it is NULL. The pointer is the return value of ec_strtok(to_decode, ":", &pass) which is NULL when ':' is found at the end of the string.

This can be recreated with https://www.wireshark.org/download/automated/captures/fuzz-2007-02-17-28608.pcap