{"id":"CVE-2008-5405","aliases":["EUVD-2008-5382","GHSA-rq9h-384r-f2cc"],"status":"published","title":"Stack-based buffer overflow in the RDP protocol password decoder in Cain \u0026 Abel 4.9.23 and 4.9.24...","description":"Stack-based buffer overflow in the RDP protocol password decoder in Cain \u0026 Abel 4.9.23 and 4.9.24, and possibly earlier, allows remote attackers to execute arbitrary code via an RDP file containing a long string.","severity":{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.46979,"percentile":0.98838,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-119"],"published":"2008-12-09T11:00:00Z","modified":"2026-06-16T22:59:54Z","exploits":[{"source":"exploitdb","id":"EDB-16659","title":"Cain \u0026 Abel 4.9.24 - RDP Buffer Overflow (Metasploit)","type":"local","platform":"aix","date":"2010-11-24","verified":true,"url":"https://www.exploit-db.com/exploits/16659"},{"source":"exploitdb","id":"EDB-7297","title":"Cain \u0026 Abel 4.9.23 - '.rdp' Buffer Overflow (PoC)","type":"dos","platform":"windows","date":"2008-11-30","verified":true,"url":"https://www.exploit-db.com/exploits/7297"},{"source":"exploitdb","id":"EDB-7309","title":"Cain \u0026 Abel 4.9.24 - '.rdp' Local Stack Overflow","type":"local","platform":"windows","date":"2008-11-30","verified":true,"url":"https://www.exploit-db.com/exploits/7309"},{"source":"exploitdb","id":"EDB-7329","title":"Cain \u0026 Abel 4.9.23 - '.rdp' Local Buffer Overflow","type":"local","platform":"windows","date":"2008-12-03","verified":true,"url":"https://www.exploit-db.com/exploits/7329"},{"source":"metasploit","id":"exploit/windows/fileformat/cain_abel_4918_rdp","title":"Cain and Abel RDP Buffer Overflow","type":"exploit","platform":"Windows","date":"2008-11-30","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/windows/fileformat/cain_abel_4918_rdp"}],"products":[{"vendor":"oxid","product":"cain_and_abel"}],"references":[{"url":"https://www.exploit-db.com/exploits/7309","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"]},{"url":"http://secunia.com/advisories/32794","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32543","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46940","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://osvdb.org/50342","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2008/3286","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://oxid.netsons.org/phpBB2/viewtopic.php?t=2750","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://securityreason.com/securityalert/4703","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"]},{"url":"https://www.exploit-db.com/exploits/7297","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-5405"},{"url":"https://github.com/advisories/GHSA-rq9h-384r-f2cc"}],"sources":{"cve":[{"id":"CVE-2008-5405","description":"Stack-based buffer overflow in the RDP protocol password decoder in Cain \u0026 Abel 4.9.23 and 4.9.24, and possibly earlier, allows remote attackers to execute arbitrary code via an RDP file containing a long string.","status":"published","published":"2008-12-09T11:00:00Z","modified":"2024-08-07T10:49:12.95Z","updated_at":"2026-11-02T14:34:43.943588Z"}],"euvd":[{"id":"EUVD-2008-5382","description":"Stack-based buffer overflow in the RDP protocol password decoder in Cain \u0026 Abel 4.9.23 and 4.9.24, and possibly earlier, allows remote attackers to execute arbitrary code via an RDP file containing a long string.","status":"published","published":"2008-12-09T11:00:00Z","modified":"2024-08-07T10:49:12Z","updated_at":"2026-11-03T01:38:43.439061Z"}],"ghsa":[{"id":"GHSA-rq9h-384r-f2cc","title":"Stack-based buffer overflow in the RDP protocol password decoder in Cain \u0026 Abel 4.9.23 and 4.9.24...","description":"Stack-based buffer overflow in the RDP protocol password decoder in Cain \u0026 Abel 4.9.23 and 4.9.24, and possibly earlier, allows remote attackers to execute arbitrary code via an RDP file containing a long string.","status":"published","published":"2022-05-17T00:44:11Z","modified":"2023-02-03T05:02:15Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:53:08.281577Z"}],"nvd":[{"id":"CVE-2008-5405","description":"Stack-based buffer overflow in the RDP protocol password decoder in Cain \u0026 Abel 4.9.23 and 4.9.24, and possibly earlier, allows remote attackers to execute arbitrary code via an RDP file containing a long string.","status":"published","published":"2008-12-10T06:44:42.173Z","modified":"2026-06-16T22:59:54.8Z","cvss":[{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:01:30.411919Z"}]}}