Vulnerability CVE-2005-0807
Published: 2005-05-02   Modified: 2012-02-12

Description:
Multiple buffer overflows in Cain & Abel before 2.67 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via (1) an IKE packet with a large ID field that is not properly handled by the PSK sniffer filter, (2) the HTTP sniffer filter, or the (3) POP3, (4) SMTP, (5) IMAP, (6) NNTP, or (7) TDS sniffer filters.

CVSS2 => (AV:N/AC:L/Au:N/C:P/I:P/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
7.5/10
6.4/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Partial
Affected software
OXID -> Cain and abel 

 References:
http://secunia.com/advisories/14630
http://xforce.iss.net/xforce/xfdb/19744
http://xforce.iss.net/xforce/xfdb/19742
http://www.securityfocus.com/bid/12840
http://www.oxid.it/
http://securitytracker.com/id?1013476
http://marc.theaimsgroup.com/?l=bugtraq&m=111116097313427&w=2
Copyright 2024, cxsecurity.com

 

Back to Top