Lucene search

K
osvGoogleOSV:DSA-813-1
HistorySep 15, 2005 - 12:00 a.m.

centericq - several

2005-09-1500:00:00
Google
osv.dev
5

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

Several problems have been discovered in libgadu which is also part of
centericq, a text-mode multi-protocol instant messenger client. The
Common Vulnerabilities and Exposures project identifies the following
problems:

  • CAN-2005-2369
    Multiple integer signedness errors may allow remote attackers to
    cause a denial of service or execute arbitrary code.
  • CAN-2005-2370
    Memory alignment errors may allows remote attackers to cause a
    denial of service on certain architectures such as sparc.
  • CAN-2005-2448
    Several endianess errors may allow remote attackers to cause a
    denial of service.

The old stable distribution (woody) is not affected by these problems.

For the stable distribution (sarge) these problems have been fixed in
version 4.20.0-1sarge2.

For the unstable distribution (sid) these problems have been fixed in
version 4.20.0-9.

We recommend that you upgrade your centericq package.

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P