send9 has discovered a vulnerability in Cain & Abel, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error when importing Cisco IOS MD5 password hashes. This can be exploited to cause a stack-based buffer overflow by tricking the user into importing hashes from a specially crafted Cisco IOS configuration file.

Successful exploitation allows execution of arbitrary code.

The vulnerability is confirmed in version 4.9.25. Prior versions may also be affected.

Solution
Update to version 4.9.26.

Provided and/or discovered by
send9

Original Advisory
http://milw0rm.com/exploits/7688

Deep Links
Links available to Secunia VIM customers