Gentoo Security Advisory GLSA 200905-07 (pidgin)

The remote host is missing updates announced in advisory GLSA 200905-07. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Ubuntu 8.04 LTS / 8.10 / 9.04 : pidgin vulnerabilities (USN-781-1)

It was discovered that Pidgin did not properly handle certain malformed messages when sending a file using the XMPP protocol handler. If a user were tricked into sending a file, a remote attacker could send a specially crafted response and cause Pidgin to crash, or possibly execute arbitrary code...

USN-781-1: Pidgin vulnerabilities

It was discovered that Pidgin did not properly handle certain malformed messages when sending a file using the XMPP protocol handler. If a user were tricked into sending a file, a remote attacker could send a specially crafted response and cause Pidgin to crash, or possibly execute arbitrary code...

Fedora 11 : pidgin-2.5.6-1.fc11 (2009-5583)

This is a bugfix & security fix release of Pidgin. The full ChangeLog is available at http://developer.pidgin.im/wiki/ChangeLog Details of the security fixes included are available at http://www.pidgin.im/news/security/ Note that Tenable Network Security has extracted the preceding description...

Fedora 10 : pidgin-2.5.6-1.fc10 (2009-5597)

This is a bugfix & security fix release of Pidgin. The full ChangeLog is available at http://developer.pidgin.im/wiki/ChangeLog Details of the security fixes included are available at http://www.pidgin.im/news/security/ Note that Tenable Network Security has extracted the preceding description...

pidgin

New pidgin packages are available for Slackware 12.0, 12.1, 12.2, and -current to fix security issues. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2009-1373 https://vulners.com/cve/CVE-2009-1374...

CVE-2009-1374

Pidgin (formerly Gaim) is affected by CVE-2009-1374 due to a buffer overflow in the decrypt_out function when processing QQ packets, which can cause the application to crash (DoS). Several connected advisories note this as part of a set of fixes for Pidgin in 2009 across multiple distributions (e...

pidgin security update

2.5.5-2 - Security/DoS fixes from 2.5.6 CVE-2009-1373-8331e31a CVE-2009-1374-ad057b75 2c9a1153 CVE-2009-1375-7829ec76 CVE-2009-1376-9dd1c4c3...

Pidgin多个缓冲区溢出漏洞

BUGTRAQ ID: 35067 CVECAN ID: CVE-2009-1376,CVE-2009-1375,CVE-2009-1374,CVE-2009-1373 Pidgin是支持多种协议的即时通讯客户端。 Pidgin在处理各种即时消息时存在多个缓冲区溢出漏洞，可能导致拒绝服务或完全入侵用户的系统。 1 处理MSN SLP消息时的截尾错误可能导致缓冲区溢出。 2 XMPP SOCKS5 bytestream服务器在初始化出站文件传输时存在缓冲区溢出。 3 PurpleCircBuffer结构的实现中存在边界条件错误，特制的XMPP或Sametime报文可能导致内存破坏而崩溃。 ...

CentOS Security Advisory CESA-2009:1060 (pidgin)

The remote host is missing updates to pidgin announced in advisory CESA-2009:1060. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...

RedHat Security Advisory RHSA-2009:1060

The remote host is missing updates to Pidgin announced in advisory RHSA-2009:1060. A buffer overflow flaw was found in the way Pidgin initiates file transfers when using the Extensible Messaging and Presence Protocol XMPP. If a Pidgin client initiates a file transfer, and the remote target sends ...

Pidgin < 2.5.6 Multiple Buffer Overflows

The remote host is running Pidgin earlier than 2.5.6. Such versions are reportedly affected by multiple buffer overflow vulnerabilities : - A buffer overflow is possible when initiating a file transfer to a malicious buddy over XMPP. CVE-2009-1373 - A buffer overflow issue in the 'decryptout'...

RedHat Update for cups RHSA-2008:0206-01

Check for the Version of cups OpenVAS Vulnerability Test RedHat Update for cups RHSA-2008:0206-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

CentOS Update for cups CESA-2008:0206 centos4 i386

Check for the Version of cups OpenVAS Vulnerability Test CentOS Update for cups CESA-2008:0206 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

CentOS Update for cups CESA-2008:0206 centos4 i386

Check for the Version of cups OpenVAS Vulnerability Test CentOS Update for cups CESA-2008:0206 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Claroline 1.8.10 allow remote attackers to inject arbitrary web script or HTML via the 1 query string to a announcements/messages.php; b lostPassword.php and c profile.php in auth/; d calendar/myagenda.php; e group/group.php; f learningPath.php...

CVE-2008-3315

Multiple cross-site scripting XSS vulnerabilities in Claroline 1.8.10 allow remote attackers to inject arbitrary web script or HTML via the 1 query string to a announcements/messages.php; b lostPassword.php and c profile.php in auth/; d calendar/myagenda.php; e group/group.php; f learningPath.php...

CentOS 3 / 4 : cups (CESA-2008:0206)

Updated cups packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Common UNIX Printing System CUPS provides a portable printing layer for UNIXR...

cups security update

CentOS Errata and Security Advisory CESA-2008:0206 Updated cups packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Common UNIX Printing System...

CVE-2003-1374

Technical details about CVE-2003-1374 are not provided in the connected documents. The sources mainly restate the buffer overflow description without specifics on affected versions, root cause, or fixes. Monitor for updates.