Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2009-3026HistoryAug 31, 2009 - 8:30 p.m.
CVE-2009-3026
2009-08-3120:30:01
Debian Security Bug Tracker
security-tracker.debian.org
5
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.004 Low
EPSS
Percentile
75.0%
protocols/jabber/auth.c in libpurple in Pidgin 2.6.0, and possibly other versions, does not follow the “require TLS/SSL” preference when connecting to older Jabber servers that do not follow the XMPP specification, which causes libpurple to connect to the server without the expected encryption and allows remote attackers to sniff sessions.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | pidgin | < 2.6.1-1 | pidgin_2.6.1-1_all.deb |
| Debian | 11 | all | pidgin | < 2.6.1-1 | pidgin_2.6.1-1_all.deb |
| Debian | 10 | all | pidgin | < 2.6.1-1 | pidgin_2.6.1-1_all.deb |
| Debian | 999 | all | pidgin | < 2.6.1-1 | pidgin_2.6.1-1_all.deb |
| Debian | 13 | all | pidgin | < 2.6.1-1 | pidgin_2.6.1-1_all.deb |
Related
veracode
veracode
Information Disclosure
2020-04-10 00:36:05
cvelist
cvelist
CVE-2009-3026
2009-08-31 20:00:00
nvd
nvd
CVE-2009-3026
2009-08-31 20:30:01
ubuntucve
ubuntucve
CVE-2009-3026
2009-08-31 00:00:00
cve
cve
CVE-2009-3026
2009-08-31 20:30:01
prion
prion
Design/Logic Flaw
2009-08-31 20:30:00
openvas
openvas
Pidgin Multiple Vulnerabilities - Sep09 (Linux)
2009-09-03 00:00:00
Pidgin Multiple Vulnerabilities (Sep 2009) - Windows
2009-09-03 00:00:00
Pidgin Multiple Vulnerabilities (Sep 2009) - Linux
2009-09-03 00:00:00
nessus
nessus
Pidgin < 2.6.1 Multiple Vulnerabilities
2009-09-11 00:00:00
Pidgin < 2.6.1 Multiple Vulnerabilities
2009-09-15 00:00:00
Oracle Linux 3 / 4 : pidgin (ELSA-2009-1218)
2013-07-12 00:00:00
securityvulns
securityvulns
libpurple / Pidgin multiple security vulnerabilities
2009-09-14 00:00:00
[ MDVSA-2009:230 ] pidgin
2009-09-14 00:00:00
gentoo
gentoo
Pidgin: Multiple vulnerabilities
2009-10-22 00:00:00
redhat
redhat
(RHSA-2009:1453) Moderate: pidgin security update
2009-09-21 00:00:00
centos
centos
finch, libpurple, pidgin security update
2009-09-22 13:47:28
oraclelinux
oraclelinux
pidgin security update
2009-09-21 00:00:00
ubuntu
ubuntu
Pidgin vulnerabilities
2010-01-18 00:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.004 Low
EPSS
Percentile
75.0%
Related for DEBIANCVE:CVE-2009-3026