CVE-2008-5405

CVE-2008-5405 refers to a stack-based buffer overflow in the RDP protocol password decoder of Cain & Abel (v4.9.23/4.9.24 and possibly earlier). The vulnerability allows remote code execution when a user opens a specially crafted RDP file containing a long string. Connected sources corroborate ex...

CVE-2008-5405: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the RDP protocol password decoder in Cain & Abel 4.9.23 and 4.9.24, and possibly earlier, allows remote attackers to execute arbitrary code via an RDP file containing a long string...

Cain & Abel 4.9.23 (rdp file) Buffer overflow Exploit

No description provided by source. exploit.py print "" print " !R4Q!4N H4CK3R" print "Cain & Abel 4.9.23 rdp file Buffer overflow Exploit" print "By:Encrypt3d.M!nd" print "encrypt3d.blogspot.com" print "" print "Greetz:-=Mizo=-,L!0N,El Mariachi,MiNi SpIder..and all my friends" print "This is...

Cain & Abel 4.9.23 (rdp file) Buffer overflow Exploit

Exploit for unknown platform in category local exploits ===================================================== Cain & Abel 4.9.23 rdp file Buffer overflow Exploit ===================================================== exploit.py print "" print " !R4Q!4N H4CK3R" print "Cain & Abel 4.9.23 rdp file...

cainabel.py.txt

exploit.py Cain & Abel v4.9.23 rdp file Buffer Overflow PoC other versions may also affected By:Encrypt3d.M!nd encrypt3d.blogspot.com Greetz:-=Mizo=-,L!0N,El Mariachi,MiNi SpIder Description: When Using Remote Desktop Password Decoder in Cain and Importing ".rdp" file contains long Charsex:8250...

Cain & Abel <= v4.9.24 .RDP Stack Overflow Exploit

Exploit for unknown platform in category local exploits ================================================== Cain & Abel = v4.9.24 .RDP Stack Overflow Exploit ================================================== !/usr/bin/perl Cain & Abel = v4.9.24 .RDP Stack Overflow Exploit Exploit by SkD...

Cain &amp; Abel 4.9.23 (rdp file) Buffer Overflow PoC

No description provided by source. exploit.py Cain & Abel v4.9.23 rdp file Buffer Overflow PoC other versions may also affected By:Encrypt3d.M!nd encrypt3d.blogspot.com Greetz:-=Mizo=-,L!0N,El Mariachi,MiNi SpIder Description: When Using Remote Desktop Password Decoder in Cain and Importing ".rdp...

Cain Abel 4.9.24 - .rdp Local Stack Overflow

Cain Abel 4.9.24 - .rdp Local Stack Overflow !/usr/bin/perl Cain & Abel = v4.9.24 .RDP Stack Overflow Exploit Exploit by SkD [email protected] ----------------------------------------------- Nothing much to say about this one. This works on an updated Windows XP SP3. On Vista this exploit is way...

Cain and Abel RDP Buffer Overflow

This module exploits a stack-based buffer overflow in the Cain & Abel v4.9.24 and below. An attacker must send the file to victim, and the victim must open the specially crafted RDP file under Tools - Remote Desktop Password Decoder. Module Options msf use...

Cain & Abel 4.9.24 - '.rdp' Local Stack Overflow

!/usr/bin/perl Cain & Abel = v4.9.24 .RDP Stack Overflow Exploit Exploit by SkD [email protected] ----------------------------------------------- Nothing much to say about this one. This works on an updated Windows XP SP3. On Vista this exploit is way easier the more challenging one was on XP, a...

Microsoft Windows远程桌面协议服务程序密钥泄露漏洞

BUGTRAQ ID: 13818 CVECAN ID: CVE-2005-1794 Microsoft Windows远程桌面协议（RDP）服务允许客户端访问MS的终端服务。 Microsoft Windows远程桌面协议的实现在处理密钥的交换时存在漏洞，远程攻击者可能利用此漏洞窃取服务器的加密密钥。 起因是尽管通过网络传输的信息已经过加密，但在建立会话的加密密钥时没有核实服务器的身份，导致攻击者可以获得密钥，计算出有效的签名，然后发动中间人攻击。成功利用这个漏洞的攻击者可以完全控制连接在服务器上的客户端。 Microsoft RDP 5.2 Microsoft RDP 5.1...

USN-646-1: rdesktop vulnerabilities

It was discovered that rdesktop did not properly validate the length of packet headers when processing RDP requests. If a user were tricked into connecting to a malicious server, an attacker could cause a denial of service or possible execute arbitrary code with the privileges of the user...

CentOS 3 : rdesktop (CESA-2008:0576)

Updated rdesktop packages that fix a security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. rdesktop is an open source client for Microsoft Windows NT Terminal Server and Microsoft...

RHEL 5 : rdesktop (RHSA-2008:0575)

An updated rdesktop package that fixes a security issue is now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. rdesktop is an open source client for Microsoft Windows NT Terminal Server and Microsoft...

RHEL 4 : rdesktop (RHSA-2008:0725)

Updated rdesktop packages that fix a security issue and a bug are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. rdesktop is an open source client for Microsoft Windows NT Terminal Server and...

RHEL 3 : rdesktop (RHSA-2008:0576)

Updated rdesktop packages that fix a security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. rdesktop is an open source client for Microsoft Windows NT Terminal Server and Microsoft...

rdesktop security update

CentOS Errata and Security Advisory CESA-2008:0576 Updated rdesktop packages that fix a security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. rdesktop is an open source client for...

rdesktop: iso_recv_msg() Integer Underflow Vulnerability

Integer underflow in the isorecvmsg function iso.c in rdesktop 1.5.0 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a Remote Desktop Protocol RDP request with a small length field...

Moderate: Red Hat Security Advisory: rdesktop security update

An updated rdesktop package that fixes a security issue is now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. rdesktop is an open source client for Microsoft Windows NT Terminal Server and Microsoft...

[SECURITY] Fedora 9 Update: rdesktop-1.6.0-1.fc9

rdesktop is an open source client for Windows NT Terminal Server and Windows 2000 & 2003 Terminal Services, capable of natively speaking Remote Desktop Protocol RDP in order to present the user's NT desktop. Unlike Citrix ICA, no server extensions are required...