Fedora Core 11 FEDORA-2009-8804 (gupnp-igd)
🗓️ 02 Sep 2009 00:00:00Reported by Copyright (C) 2009 E-Soft Inc.Type
openvas🔗 plugins.openvas.org👁 34 Views
| Reporter | Title | Published | Views | Family All 122 |
|---|---|---|---|---|
| Pidgin MSN <= 2.5.8 Remote Code Execution Exploit | 9 Sep 200900:00 | – | zdt | |
| Pidgin < 2.5.9 Buffer Overflow | 21 Aug 200900:00 | – | nessus | |
| CentOS 4 / 5 : pidgin (CESA-2009:1060) | 6 Jan 201000:00 | – | nessus | |
| CentOS 3 / 5 : pidgin (CESA-2009:1218) | 20 Aug 200900:00 | – | nessus | |
| Debian DSA-1870-1 : pidgin - insufficient input validation | 24 Feb 201000:00 | – | nessus | |
| Fedora 11 : pidgin-2.6.3-2.fc11 (2009-10662) | 22 Oct 200900:00 | – | nessus | |
| Fedora 10 : pidgin-2.6.3-2.fc10 (2009-10702) | 22 Oct 200900:00 | – | nessus | |
| Fedora 10 : pidgin-2.6.0-1.fc10 (2009-8791) | 24 Aug 200900:00 | – | nessus | |
| Fedora 11 : farsight2-0.0.14-1.fc11 / gupnp-igd-0.1.3-3.fc11 / libnice-0.0.9-1.fc11 / etc (2009-8804) | 24 Aug 200900:00 | – | nessus | |
| Fedora 10 : pidgin-2.6.1-1.fc10 (2009-8826) | 24 Aug 200900:00 | – | nessus |
10
| Source | Link |
|---|---|
| secure1 | www.secure1.securityspace.com/smysecure/catid.html |
# SPDX-FileCopyrightText: 2009 E-Soft Inc.
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only
if(description)
{
script_oid("1.3.6.1.4.1.25623.1.0.64718");
script_version("2025-01-13T08:32:03+0000");
script_tag(name:"last_modification", value:"2025-01-13 08:32:03 +0000 (Mon, 13 Jan 2025)");
script_tag(name:"creation_date", value:"2009-09-02 04:58:39 +0200 (Wed, 02 Sep 2009)");
script_cve_id("CVE-2009-2694");
script_tag(name:"cvss_base", value:"10.0");
script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:C/I:C/A:C");
script_name("Fedora Core 11 FEDORA-2009-8804 (gupnp-igd)");
script_category(ACT_GATHER_INFO);
script_copyright("Copyright (C) 2009 E-Soft Inc.");
script_family("Fedora Local Security Checks");
script_tag(name:"insight", value:"Update Information:
pidgin upgrade to 2.6.0 for the CVE-2009-2694, insufficient input validation in
msn_slplink_process_msg(). 2.6.0 has Voice and Video support via farsight2
(Fedora 11+ only) and numerous other bug fixes.
farsight2, libnice and gupnp-igd are version upgrades to make voice and
video actually work on Fedora 11.
ChangeLog:
* Thu Aug 6 2009 Warren Togami - 0.1.3-3
- Fix macros that were there for no good reason.
* Fri Jul 24 2009 Fedora Release Engineering - 0.1.3-2");
script_tag(name:"solution", value:"Apply the appropriate updates.
This update can be installed with the yum update program. Use
su -c 'yum update gupnp-igd' at the command line.");
script_xref(name:"URL", value:"https://secure1.securityspace.com/smysecure/catid.html?in=FEDORA-2009-8804");
script_tag(name:"summary", value:"The remote host is missing an update to gupnp-igd
announced via advisory FEDORA-2009-8804.
Note: This VT has been deprecated and is therefore no longer functional.");
script_tag(name:"qod_type", value:"package");
script_tag(name:"solution_type", value:"VendorFix");
script_tag(name:"deprecated", value:TRUE);
exit(0);
}
exit(66);
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
13 Jan 2025 00:00Current
7.6High risk
Vulners AI Score7.6
CVSS 210
EPSS0.20295