PT-2005-4700 · Kadu · Kadu

Published 2005-12-01 · Updated 2018-10-19 · CVE-2005-3960

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Kadu versions 0.4.2 through 0.5.0pre

Description The issue allows remote attackers to cause a denial of service, resulting in a crash or generation of traffic, via a malformed message, possibly due to incomplete information.

Recommendations For Kadu versions 0.4.2 through 0.5.0pre, consider restricting the handling of malformed messages to prevent denial of service attacks. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2005-3960

Affected Products

Kadu

References · 7

• http://secunia.com/advisories/17764 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-3960 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23258 · Note
• http://vupen.com/english/advisories/2005/2648 · Note
• http://securityfocus.com/archive/1/417920/100/0/threaded · Note
• http://osvdb.org/21215 · Note
• http://securityfocus.com/bid/15620 · Note