CVE-2008-5405 Stack-based buffer overflow in the RDP protocol password decoder in Cain & Abel 4.9.23 and 4.9.24, and possibly earlier, allows remote attackers to execute arbitrary code via an RDP file containing a....
HighCVSS 9.3
EPSS 47.0%
Framework module
Public exploit
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in the RDP protocol password decoder in Cain & Abel 4.9.23 and 4.9.24, and possibly earlier, allows remote attackers to execute arbitrary code via an RDP file containing a long string.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oxid cain and abel | = 4.9.23 | No fix listed |
| oxid cain and abel | = 4.9.24 | No fix listed |
References
- 50342 vdb-entry
- oxid.netsons.org
- 32794 third-party-advisory vendor-advisory
- 4703 third-party-advisory
- 32543 vdb-entry
- ADV-2008-3286 vdb-entry
- cainabel-rdp-bo(46940) vdb-entry
- 7297 exploit
- 7309 exploit