FKIE_CVE-2005-0807

Vulnerability from fkie_nvd - Published: 2005-05-02 04:00 - Updated: 2025-04-03 01:03
Severity ?
Summary
Multiple buffer overflows in Cain & Abel before 2.67 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via (1) an IKE packet with a large ID field that is not properly handled by the PSK sniffer filter, (2) the HTTP sniffer filter, or the (3) POP3, (4) SMTP, (5) IMAP, (6) NNTP, or (7) TDS sniffer filters.
References
cve@mitre.orghttp://marc.info/?l=bugtraq&m=111116097313427&w=2
cve@mitre.orghttp://secunia.com/advisories/14630Patch
cve@mitre.orghttp://securitytracker.com/id?1013476
cve@mitre.orghttp://www.oxid.it/
cve@mitre.orghttp://www.securityfocus.com/bid/12840
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/19742
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/19744
af854a3a-2127-422b-91ae-364da2661108http://marc.info/?l=bugtraq&m=111116097313427&w=2
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/14630Patch
af854a3a-2127-422b-91ae-364da2661108http://securitytracker.com/id?1013476
af854a3a-2127-422b-91ae-364da2661108http://www.oxid.it/
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/12840
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/19742
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/19744
Impacted products
Vendor Product Version
oxid cain_and_abel 2.5
oxid cain_and_abel 2.5_beta21
oxid cain_and_abel 2.5_beta29
oxid cain_and_abel 2.5_beta34
oxid cain_and_abel 2.5_beta36
oxid cain_and_abel 2.5_beta40
oxid cain_and_abel 2.5_beta41
oxid cain_and_abel 2.5_beta47
oxid cain_and_abel 2.5_beta51
oxid cain_and_abel 2.5_beta56
oxid cain_and_abel 2.5_beta59
oxid cain_and_abel 2.5_beta65
oxid cain_and_abel 2.65
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:oxid:cain_and_abel:2.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "C3BC3981-3257-4C4E-84D6-39D418B23C84",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oxid:cain_and_abel:2.5_beta21:*:*:*:*:*:*:*",
              "matchCriteriaId": "529D9000-ADDA-47FC-B52B-5EB11794D8C3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oxid:cain_and_abel:2.5_beta29:*:*:*:*:*:*:*",
              "matchCriteriaId": "057187E0-5801-4362-BB92-7A73B2A61A96",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oxid:cain_and_abel:2.5_beta34:*:*:*:*:*:*:*",
              "matchCriteriaId": "33BBA2EB-92CC-4961-A5A1-A535AD764A82",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oxid:cain_and_abel:2.5_beta36:*:*:*:*:*:*:*",
              "matchCriteriaId": "BEA4FFD4-0BBF-4368-9F48-ADB783103E20",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oxid:cain_and_abel:2.5_beta40:*:*:*:*:*:*:*",
              "matchCriteriaId": "50ED95C2-2E07-4F3B-BF5E-4B221EAB60AC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oxid:cain_and_abel:2.5_beta41:*:*:*:*:*:*:*",
              "matchCriteriaId": "08A35BC2-20C6-4CB5-8E0F-153D11C42BF2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oxid:cain_and_abel:2.5_beta47:*:*:*:*:*:*:*",
              "matchCriteriaId": "1C9CF0AE-1369-46DA-A395-E13E8095BB42",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oxid:cain_and_abel:2.5_beta51:*:*:*:*:*:*:*",
              "matchCriteriaId": "18552FDB-FF80-4AE2-8654-3AD0656249C4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oxid:cain_and_abel:2.5_beta56:*:*:*:*:*:*:*",
              "matchCriteriaId": "E1311B19-DBC4-4EF0-B3F0-A882DDBF3E30",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oxid:cain_and_abel:2.5_beta59:*:*:*:*:*:*:*",
              "matchCriteriaId": "68EDA7F0-4C16-449B-8234-0B7DFC587CFD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oxid:cain_and_abel:2.5_beta65:*:*:*:*:*:*:*",
              "matchCriteriaId": "6F3A51F3-046D-4F1D-AA1E-D76AF9B2FF5C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:oxid:cain_and_abel:2.65:*:*:*:*:*:*:*",
              "matchCriteriaId": "BF6F40FE-3E67-4118-90F4-9A03478A0B10",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple buffer overflows in Cain \u0026 Abel before 2.67 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via (1) an IKE packet with a large ID field that is not properly handled by the PSK sniffer filter, (2) the HTTP sniffer filter, or the (3) POP3, (4) SMTP, (5) IMAP, (6) NNTP, or (7) TDS sniffer filters."
    }
  ],
  "id": "CVE-2005-0807",
  "lastModified": "2025-04-03T01:03:51.193",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": true,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2005-05-02T04:00:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://marc.info/?l=bugtraq\u0026m=111116097313427\u0026w=2"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ],
      "url": "http://secunia.com/advisories/14630"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://securitytracker.com/id?1013476"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.oxid.it/"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/12840"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/19742"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/19744"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://marc.info/?l=bugtraq\u0026m=111116097313427\u0026w=2"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://secunia.com/advisories/14630"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securitytracker.com/id?1013476"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.oxid.it/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/12840"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/19742"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/19744"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.