CVE-2005-0807

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-05-02 · updated 2026-06-16

Description

Multiple buffer overflows in Cain & Abel before 2.67 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via (1) an IKE packet with a large ID field that is not properly handled by the PSK sniffer filter, (2) the HTTP sniffer filter, or the (3) POP3, (4) SMTP, (5) IMAP, (6) NNTP, or (7) TDS sniffer filters.

Affected products

Oxid Cain And Abel: 2.5, 2.5_beta21, 2.5_beta29, 2.5_beta34, 2.5_beta36, 2.5_beta40 (+7)

References

http://marc.info/?l=bugtraq&m=111116097313427&w=2
http://secunia.com/advisories/14630
http://securitytracker.com/id?1013476
http://www.oxid.it/
http://www.securityfocus.com/bid/12840
https://exchange.xforce.ibmcloud.com/vulnerabilities/19742
https://exchange.xforce.ibmcloud.com/vulnerabilities/19744
http://marc.info/?l=bugtraq&m=111116097313427&w=2
http://secunia.com/advisories/14630
http://securitytracker.com/id?1013476
http://www.oxid.it/
http://www.securityfocus.com/bid/12840

Get alerted when CVE-2005-0807 or the next vulnerability affects your stack