critical9.3Public exploit code
CVE-2008-5405
Stack-based buffer overflow in the RDP protocol password decoder in Cain & Abel 4.9.23 and 4.9.24, and possibly earlier, allows remote attackers to execute arb…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Cain & Abel 4.9.24 - RDP Buffer Overflow (Metasploit)2010-11-24 · local · aix · Verified
- Cain & Abel 4.9.23 - '.rdp' Local Buffer Overflow2008-12-03 · local · windows · Verified
- Cain & Abel 4.9.24 - '.rdp' Local Stack Overflow2008-11-30 · local · windows · Verified
- Cain & Abel 4.9.23 - '.rdp' Buffer Overflow (PoC)2008-11-30 · dos · windows · Verified
Impact
Stack-based buffer overflow in the RDP protocol password decoder in Cain & Abel 4.9.23 and 4.9.24, and possibly earlier, allows remote attackers to execute arbitrary code via an RDP file containing a long string.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oxid | Cain And Abel | Versions 4.9.23, 4.9.24 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/50342
- http://oxid.netsons.org/phpBB2/viewtopic.php?t=2750
- http://secunia.com/advisories/32794
- http://securityreason.com/securityalert/4703
- http://www.securityfocus.com/bid/32543
- http://www.vupen.com/english/advisories/2008/3286
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46940
- https://www.exploit-db.com/exploits/7297
- https://www.exploit-db.com/exploits/7309
- http://osvdb.org/50342
- http://oxid.netsons.org/phpBB2/viewtopic.php?t=2750
- http://secunia.com/advisories/32794
- http://securityreason.com/securityalert/4703
- http://www.securityfocus.com/bid/32543
- http://www.vupen.com/english/advisories/2008/3286
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46940
- https://www.exploit-db.com/exploits/7297
- https://www.exploit-db.com/exploits/7309