Lucene search

[email protected]CVE-2005-0807

HistoryMay 02, 2005 - 4:00 a.m.

CVE-2005-0807

2005-05-0204:00:00

[email protected]

web.nvd.nist.gov

cain & abel

buffer overflow

denial of service

remote attackers

arbitrary code

sniffer filters

8.3 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.058 Low

EPSS

Percentile

93.4%

JSON

Multiple buffer overflows in Cain & Abel before 2.67 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via (1) an IKE packet with a large ID field that is not properly handled by the PSK sniffer filter, (2) the HTTP sniffer filter, or the (3) POP3, (4) SMTP, (5) IMAP, (6) NNTP, or (7) TDS sniffer filters.

Affected configurations

NVD

Node

oxidcain_and_abelMatch2.5

oxidcain_and_abelMatch2.5_beta21

oxidcain_and_abelMatch2.5_beta29

oxidcain_and_abelMatch2.5_beta34

oxidcain_and_abelMatch2.5_beta36

oxidcain_and_abelMatch2.5_beta40

oxidcain_and_abelMatch2.5_beta41

oxidcain_and_abelMatch2.5_beta47

oxidcain_and_abelMatch2.5_beta51

oxidcain_and_abelMatch2.5_beta56

oxidcain_and_abelMatch2.5_beta59

oxidcain_and_abelMatch2.5_beta65

oxidcain_and_abelMatch2.65

CPENameOperatorVersion
oxid:cain_and_abeloxid cain and abeleq2.5
oxid:cain_and_abeloxid cain and abeleq2.5_beta21
oxid:cain_and_abeloxid cain and abeleq2.5_beta29
oxid:cain_and_abeloxid cain and abeleq2.5_beta34
oxid:cain_and_abeloxid cain and abeleq2.5_beta36
oxid:cain_and_abeloxid cain and abeleq2.5_beta40
oxid:cain_and_abeloxid cain and abeleq2.5_beta41
oxid:cain_and_abeloxid cain and abeleq2.5_beta47
oxid:cain_and_abeloxid cain and abeleq2.5_beta51
oxid:cain_and_abeloxid cain and abeleq2.5_beta56

CPE	Name	Operator	Version
oxid:cain_and_abel	oxid cain and abel	eq	2.5
oxid:cain_and_abel	oxid cain and abel	eq	2.5_beta21
oxid:cain_and_abel	oxid cain and abel	eq	2.5_beta29
oxid:cain_and_abel	oxid cain and abel	eq	2.5_beta34
oxid:cain_and_abel	oxid cain and abel	eq	2.5_beta36
oxid:cain_and_abel	oxid cain and abel	eq	2.5_beta40
oxid:cain_and_abel	oxid cain and abel	eq	2.5_beta41
oxid:cain_and_abel	oxid cain and abel	eq	2.5_beta47
oxid:cain_and_abel	oxid cain and abel	eq	2.5_beta51
oxid:cain_and_abel	oxid cain and abel	eq	2.5_beta56

Rows per page:

1-10 of 131

References

marc.info/?l=bugtraq&m=111116097313427&w=2

secunia.com/advisories/14630

securitytracker.com/id?1013476

www.oxid.it/

www.securityfocus.com/bid/12840

exchange.xforce.ibmcloud.com/vulnerabilities/19742

exchange.xforce.ibmcloud.com/vulnerabilities/19744

8.3 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.058 Low

EPSS

Percentile

93.4%

JSON

Related for CVE-2005-0807

cvelist1 nvd1