Lucene search

K
nvd[email protected]NVD:CVE-2005-3899
HistoryNov 29, 2005 - 9:03 p.m.

CVE-2005-3899

2005-11-2921:03:00
web.nvd.nist.gov

5.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:N/I:N/A:C

6.5 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.6%

The automatic update feature in Google Talk allows remote attackers to cause a denial of service (CPU and memory consumption) by poisoning a target’s DNS cache and causing a large update file to be sent, which consumes large amounts of CPU and memory during the signature verification, aka BenjiBug.

Affected configurations

NVD
Node
googletalk

5.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:N/I:N/A:C

6.5 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.6%

Related for NVD:CVE-2005-3899