Read the docs
TI-2005-00751 Aliases CVE-2005-0807GHSA-qxjh-rmr9-893r

Multiple buffer overflows in Cain & Abel before 2.67 allow remote attackers to cause a…

Priority LOW 39Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Multiple buffer overflows in Cain & Abel before 2.67 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via (1) an IKE packet with a large ID field that is not properly handled by the PSK sniffer filter, (2) the HTTP sniffer filter, or the (3) POP3, (4) SMTP, (5) IMAP, (6) NNTP, or (7) TDS sniffer filters.

Why it matters now

EPSS 0.03601 89th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 13

CPEVersionsRoleVendor
cpe:2.3:a:oxid:cain_and_abel:2.5:*:*:*:*:*:*:*2.5VulnerableOxid
cpe:2.3:a:oxid:cain_and_abel:2.5_beta21:*:*:*:*:*:*:*2.5_beta21VulnerableOxid
cpe:2.3:a:oxid:cain_and_abel:2.5_beta29:*:*:*:*:*:*:*2.5_beta29VulnerableOxid
cpe:2.3:a:oxid:cain_and_abel:2.5_beta34:*:*:*:*:*:*:*2.5_beta34VulnerableOxid
cpe:2.3:a:oxid:cain_and_abel:2.5_beta36:*:*:*:*:*:*:*2.5_beta36VulnerableOxid
cpe:2.3:a:oxid:cain_and_abel:2.5_beta40:*:*:*:*:*:*:*2.5_beta40VulnerableOxid
cpe:2.3:a:oxid:cain_and_abel:2.5_beta41:*:*:*:*:*:*:*2.5_beta41VulnerableOxid
cpe:2.3:a:oxid:cain_and_abel:2.5_beta47:*:*:*:*:*:*:*2.5_beta47VulnerableOxid
cpe:2.3:a:oxid:cain_and_abel:2.5_beta51:*:*:*:*:*:*:*2.5_beta51VulnerableOxid
cpe:2.3:a:oxid:cain_and_abel:2.5_beta56:*:*:*:*:*:*:*2.5_beta56VulnerableOxid
  • cpe:2.3:a:oxid:cain_and_abel:2.5:*:*:*:*:*:*:* Versions 2.5 Vulnerable ·Oxid
  • cpe:2.3:a:oxid:cain_and_abel:2.5_beta21:*:*:*:*:*:*:* Versions 2.5_beta21 Vulnerable ·Oxid
  • cpe:2.3:a:oxid:cain_and_abel:2.5_beta29:*:*:*:*:*:*:* Versions 2.5_beta29 Vulnerable ·Oxid
  • cpe:2.3:a:oxid:cain_and_abel:2.5_beta34:*:*:*:*:*:*:* Versions 2.5_beta34 Vulnerable ·Oxid
  • cpe:2.3:a:oxid:cain_and_abel:2.5_beta36:*:*:*:*:*:*:* Versions 2.5_beta36 Vulnerable ·Oxid
  • cpe:2.3:a:oxid:cain_and_abel:2.5_beta40:*:*:*:*:*:*:* Versions 2.5_beta40 Vulnerable ·Oxid
  • cpe:2.3:a:oxid:cain_and_abel:2.5_beta41:*:*:*:*:*:*:* Versions 2.5_beta41 Vulnerable ·Oxid
  • cpe:2.3:a:oxid:cain_and_abel:2.5_beta47:*:*:*:*:*:*:* Versions 2.5_beta47 Vulnerable ·Oxid
  • cpe:2.3:a:oxid:cain_and_abel:2.5_beta51:*:*:*:*:*:*:* Versions 2.5_beta51 Vulnerable ·Oxid
  • cpe:2.3:a:oxid:cain_and_abel:2.5_beta56:*:*:*:*:*:*:* Versions 2.5_beta56 Vulnerable ·Oxid
Show 3 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:oxid:cain_and_abel:2.5_beta59:*:*:*:*:*:*:*2.5_beta59VulnerableOxid
cpe:2.3:a:oxid:cain_and_abel:2.5_beta65:*:*:*:*:*:*:*2.5_beta65VulnerableOxid
cpe:2.3:a:oxid:cain_and_abel:2.65:*:*:*:*:*:*:*2.65VulnerableOxid
  • cpe:2.3:a:oxid:cain_and_abel:2.5_beta59:*:*:*:*:*:*:* Versions 2.5_beta59 Vulnerable ·Oxid
  • cpe:2.3:a:oxid:cain_and_abel:2.5_beta65:*:*:*:*:*:*:* Versions 2.5_beta65 Vulnerable ·Oxid
  • cpe:2.3:a:oxid:cain_and_abel:2.65:*:*:*:*:*:*:* Versions 2.65 Vulnerable ·Oxid

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2005-0807
  2. 2026-10-03 Alias added: GHSA-qxjh-rmr9-893r

References

Other 2

  • TI-2008-05145 Stack-based buffer overflow in the RDP protocol password decoder in Cain & Abel 4.9.23… CVSS 2.0HIGH 9.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences