Format string vulnerability in the cursesmsg function in the Ncurses interface (eccurses.c) for Ettercap before 0.7.3 allows remote attackers to execute arbitrary code.