[Backports-security-announce] Security Update for pidgin

Gerfried Fuchs uploaded new packages for pidgin which fixed the following security problem: CVE-2008-2957, Debian Bug 488632 The UPnP functionality in Pidgin 2.0.0, and possibly other versions, allows remote attackers to trigger the download of arbitrary files and cause a denial of service memory...

[Backports-security-announce] Security Update for pidgin

Gerfried Fuchs uploaded new packages for pidgin which fixed the following security problem: CVE-2008-2957, Debian Bug 488632 The UPnP functionality in Pidgin 2.0.0, and possibly other versions, allows remote attackers to trigger the download of arbitrary files and cause a denial of service memory...

Pidgin Detection (Windows)

Pidgin, an open source, multi-protocol instant messaging client, is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid34205; scriptversion"1.17"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06"; scriptxrefname:"IAVT...

ZDI-08-054: Multiple Vendor libpurple MSN Protocol SLP Message Heap Overflow Vulnerability

ZDI-08-054: Multiple Vendor libpurple MSN Protocol SLP Message Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-054 August 28, 2008 -- CVE ID: CVE-2008-2927 -- Affected Vendors: Adium Pidgin -- Affected Products: Adium Adiumx Pidgin Pidgin -- Vulnerability Details:...

Pidgin NSS plugin SSL Certificate Validation Security Bypass Vulnerability (Windows)

The host is running Pidgin, which is prone to Security Bypass Vulnerability OpenVAS Vulnerability Test $Id: secpodpidginsslsecbypassvulnwin900020.nasl 5370 2017-02-20 15:24:26Z cfi $ Description: Pidgin NSS plugin SSL Certificate Validation Security Bypass Vulnerability Windows Authors: Sharath S...

Pidgin NSS plugin SSL Certificate Validation Security Bypass Vulnerability (Linux)

The host is running Pidgin, which is prone to Security Bypass Vulnerability OpenVAS Vulnerability Test $Id: secpodpidginsslsecbypassvulnlin900022.nasl 7823 2017-11-20 08:54:04Z cfischer $ Description: Pidgin NSS plugin SSL Certificate Validation Security Bypass Vulnerability Linux Authors: Chanda...

Pidgin MSN SLP Message Integer Overflow Vulnerabilities (Windows)

The host is running Pidgin, which is prone to integer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodpidginintgroverflowwin900008.nasl 5370 2017-02-20 15:24:26Z cfi $ Description: Pidgin MSN SLP Message Integer Overflow Vulnerabilities Windows Authors: Chandan S Copyright: Copyrigh...

Pidgin MSN SLP Message Integer Overflow Vulnerabilities (Linux)

The host is running Pidgin, which is prone to integer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodpidginintgroverflowlin900009.nasl 7823 2017-11-20 08:54:04Z cfischer $ Description: Pidgin MSN SLP Message Integer Overflow Vulnerabilities Linux Authors: Chandan S Copyright:...

Pidgin NSS plugin SSL Certificate Validation Security Bypass Vulnerability - Windows

Pidgin is prone to a security bypass vulnerability SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:pidgin:pidgin"; ifdescription...

Pidgin MSN SLP Message Integer Overflow Vulnerabilities - Windows

Pidgin is prone to an integer overflow vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Pidgin NSS plugin SSL Certificate Validation Security Bypass Vulnerability - Linux

Pidgin is prone to a security bypass vulnerability SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:pidgin:pidgin"; ifdescription...

Pidgin MSN SLP Message Integer Overflow Vulnerabilities - Linux

Pidgin is prone to an integer overflow vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:pidgin:pidgin"; ifdescripti...

Code injection

The NSS plugin in libpurple in Pidgin 2.4.3 does not verify SSL certificates, which makes it easier for remote attackers to trick a user into accepting an invalid server certificate for a spoofed service...

CVE-2008-3532

The NSS plugin in libpurple in Pidgin 2.4.3 does not verify SSL certificates, which makes it easier for remote attackers to trick a user into accepting an invalid server certificate for a spoofed service...

CVE-2008-3532

The NSS plugin in libpurple in Pidgin 2.4.3 does not verify SSL certificates, which makes it easier for remote attackers to trick a user into accepting an invalid server certificate for a spoofed service...

DEBIAN-CVE-2008-3532

The NSS plugin in libpurple in Pidgin 2.4.3 does not verify SSL certificates, which makes it easier for remote attackers to trick a user into accepting an invalid server certificate for a spoofed service...

CVE-2008-3532

The NSS plugin in libpurple in Pidgin 2.4.3 does not verify SSL certificates, which makes it easier for remote attackers to trick a user into accepting an invalid server certificate for a spoofed service...

CVE-2008-3532

The NSS plugin in libpurple in Pidgin 2.4.3 does not verify SSL certificates, which makes it easier for remote attackers to trick a user into accepting an invalid server certificate for a spoofed service...

CVE-2008-3532

CVE-2008-3532 affects the NSS plugin in libpurple (Pidgin) where SSL certificate verification was not performed. The consequence is that remote attackers could trick users into accepting invalid certificates for spoofed services, enabling MITM-style credential exposure or session hijacking. Publi...

CVE-2008-3532

The NSS plugin in libpurple in Pidgin 2.4.3 does not verify SSL certificates, which makes it easier for remote attackers to trick a user into accepting an invalid server certificate for a spoofed service...