Pidgin Libpurple库MSN-SLP表情符目录遍历漏洞

BUGTRAQ ID: 37524 Pidgin是支持多种协议的即时通讯客户端。 Pidgin的Libpurple库在实现自定义表情符功能时存在安全漏洞，远程攻击者可以通过提交包含有目录遍历序列的MSN表情符请求读取任意文件的内容。以下是libpurple/protocols/msn/slp.c中的有漏洞代码段： static void gotsessionreqMsnSlpCall slpcall, const char branch, const char eufguid, const char context gboolean accepted = FALSE; if...

CentOS 4 / 5 : pidgin (CESA-2009:1453)

Updated pidgin packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program which can log in to multiple accounts on...

Pidgin MSN MSNP2P Message Integer Overflow (CVE-2008-2927)

Pidgin is a multi-protocol, multi-platform instant messaging client. The product supports numerous protocols such as AIM and ICQ, MSN and Yahoo!. Pidgin allows one user to log into multiple accounts on multiple IM networks simultaneously. There exists an integer overflow vulnerability in Pidgin...

Mandriva Security Advisory MDVSA-2009:321 (pidgin)

The remote host is missing an update to pidgin announced via advisory MDVSA-2009:321. OpenVAS Vulnerability Test $Id: mdksa2009321.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:321 pidgin Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...

Mandriva Security Advisory MDVSA-2009:321 (pidgin)

The remote host is missing an update to pidgin announced via advisory MDVSA-2009:321. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

openSUSE Security Update : finch (finch-1625)

This update of pidgin fixes the following issues : - CVE-2009-3026: CVSS v2 Base Score: 5.0 Allowed to send confidential data unencrypted even if SSL was chosen by user. - CVE-2009-3025: CVSS v2 Base Score: 4.3 Remote denial of service in yahoo IM plug-in. - CVE-2009-3083: CVSS v2 Base Score: 5.0...

openSUSE Security Update : finch (finch-1625)

This update of pidgin fixes the following issues : - CVE-2009-3026: CVSS v2 Base Score: 5.0 Allowed to send confidential data unencrypted even if SSL was chosen by user. - CVE-2009-3025: CVSS v2 Base Score: 4.3 Remote denial of service in yahoo IM plug-in. - CVE-2009-3083: CVSS v2 Base Score: 5.0...

openSUSE Security Update : finch (finch-1625)

This update of pidgin fixes the following issues : - CVE-2009-3026: CVSS v2 Base Score: 5.0 Allowed to send confidential data unencrypted even if SSL was chosen by user. - CVE-2009-3025: CVSS v2 Base Score: 4.3 Remote denial of service in yahoo IM plug-in. - CVE-2009-3083: CVSS v2 Base Score: 5.0...

Mandriva Linux Security Advisory : pidgin (MDVSA-2009:321)

Security vulnerabilities has been identified and fixed in pidgin : The NSS plugin in libpurple in Pidgin 2.4.1 does not verify SSL certificates, which makes it easier for remote attackers to trick a user into accepting an invalid server certificate for a spoofed service. CVE-2008-3532 Pidgin 2.4....

SLES11: Security update for pidgin

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: cdparanoia desktop-file-utils fam gnome-vfs2 gstreamer-010 libogg0 liboil More details may also be found by searching for the SuSE Enterprise Server 11 patch...

SuSE 11 Security Update : pidgin (SAT Patch Number 1604)

This update of pidgin fixes the following issues : - Allowed to send confidential data unencrypted even if SSL was chosen by user. CVE-2009-3026: CVSS v2 Base Score: 5.0 - Remote denial of service in yahoo IM plug-in. CVE-2009-3025: CVSS v2 Base Score: 4.3 - Remote denial of service in MSN plug-i...

SLES11: Security update for pidgin

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: cdparanoia desktop-file-utils fam gnome-vfs2 gstreamer-010 libogg0 liboil More details may also be found by searching for the SuSE Enterprise Server 11 patch...

Debian Security Advisory DSA 1932-1 (pidgin)

The remote host is missing an update to pidgin announced via advisory DSA 1932-1. OpenVAS Vulnerability Test $Id: deb19321.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1932-1 pidgin Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

CentOS Security Advisory CESA-2009:1536 (pidgin)

The remote host is missing updates to pidgin announced in advisory CESA-2009:1536. CESA-2009:1536 66171 4 $Id: ovcesa20091536.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:1536 pidgin Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Debian: Security Advisory (DSA-1932-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RedHat Security Advisory RHSA-2009:1536

The remote host is missing updates announced in advisory RHSA-2009:1536. Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. The AOL Open System for Communication in Realtime OSCAR protocol is used by the AOL ICQ and...

CentOS Security Advisory CESA-2009:1535 (pidgin)

The remote host is missing updates to pidgin announced in advisory CESA-2009:1535. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...

RedHat Security Advisory RHSA-2009:1535

The remote host is missing updates announced in advisory RHSA-2009:1535. Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. An invalid pointer dereference bug was found in the way the Pidgin OSCAR protocol...

RedHat Security Advisory RHSA-2009:1536

The remote host is missing updates announced in advisory RHSA-2009:1536. Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. The AOL Open System for Communication in Realtime OSCAR protocol is used by the AOL ICQ and...

CentOS Security Advisory CESA-2009:1536 (pidgin)

The remote host is missing updates to pidgin announced in advisory CESA-2009:1536. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...