[Backports-security-announce] Security Update for pidgin

Jan Wagner uploaded a new package for pidgin which fixed the following security problem: CVE-2010-16241 It was discovered that the msnemoticonmsg function in slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.7.0 allows remote attackers to cause a denial of service application crash...

[Backports-security-announce] Security Update for pidgin

Jan Wagner uploaded a new package for pidgin which fixed the following security problem: CVE-2010-16241 It was discovered that the msnemoticonmsg function in slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.7.0 allows remote attackers to cause a denial of service application crash...

Slackware 12.0 / 12.1 / 12.2 / 13.0 / current : pidgin (SSA:2010-138-01)

New pidgin packages are available for Slackware 12.0, 12.1, 12.2, 13.0, and -current to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2010-138-01. The text itself is...

Mandriva Linux Security Advisory : pidgin (MDVSA-2010:097)

A security vulnerability has been identified and fixed in pidgin : The msnemoticonmsg function in slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.7.0 allows remote attackers to cause a denial of service application crash via a custom emoticon in a malformed SLP message...

[slackware-security] pidgin

New pidgin packages are available for Slackware 12.0, 12.1, 12.2, 13.0, and -current to fix a security issue. Here are the details from the Slackware 13.0 ChangeLog: patches/packages/pidgin-2.7.0-i486-1slack13.0.txz: Upgraded. Upgraded to pidgin-2.7.0 and pidgin-encryption-3.1. The msnemoticonmsg...

CVE-2010-1624

The CVE-2010-1624 issue affects Pidgin (libpurple) MSN protocol plugin, specifically the msn_emoticon_msg function in slp.c. It allows remote authenticated users to trigger a denial of service via a specially crafted SLP message containing a malformed emoticon, causing a NULL pointer dereference ...

CVE-2010-1624

The msnemoticonmsg function in slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.7.0 allows remote authenticated users to cause a denial of service NULL pointer dereference and application crash via a custom emoticon in a malformed SLP message...

CVE-2009-1624

Directory traversal vulnerability in index.php in Dew-NewPHPLinks 2.0 allows remote attackers to read arbitrary files via a .. dot dot in the show parameter...

CVE-2009-1624

Directory traversal vulnerability in index.php in Dew-NewPHPLinks 2.0 allows remote attackers to read arbitrary files via a .. dot dot in the show parameter...

CVE-2009-1624

Technical details (affected software, versions, root cause, impact, remediation) are not publicly provided in the connected documents for CVE-2009-1624; monitor for updates.

CVE-2009-1624

creationtimestamp| type| source ---|---|--- 2009-04-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8545...

Debian: Security Advisory (DSA-1624-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1624-1 : libxslt - buffer overflows

Chris Evans discovered that a buffer overflow in the RC4 functions of libexslt may lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-1624. The text...

CVE-2008-1624

Directory traversal vulnerability in v2demo/page.php in Jshop Server 1.x through 2.x allows remote attackers to include and execute arbitrary local files via a .. dot dot in the xPage parameter...

CVE-2008-1624

CVE-2008-1624 affects Jshop Server 1.x–2.x (v2demo/page.php). The vulnerability is a directory traversal flaw allowing remote attackers to include and execute arbitrary local files via a .. in the xPage parameter. Affected component is v2demo/page.php; root cause is improper validation leading to...

CVE-2008-1624

Directory traversal vulnerability in v2demo/page.php in Jshop Server 1.x through 2.x allows remote attackers to include and execute arbitrary local files via a .. dot dot in the xPage parameter...

CVE-2007-1624

Multiple SQL injection vulnerabilities affect realGuestbook 5.01, allowing remote attackers to inject arbitrary SQL via (1) name, (2) email, (3) homepage, and (4) text parameters to save_entry.php reachable through add_entry.php (and possibly other unspecified parameters/files). This CVE entry do...

CVE-2006-1624

The CVE-2006-1624 entry concerns the Linux sysklogd package (syslogd) where the default configuration does not enable the -x option (disable name lookups). This enables remote attackers to induce a denial of service via traffic amplification using messages with spoofed source IP addresses. The av...

CVE-2002-1624

CVE-2002-1624 refers to a buffer overflow in the Lotus Domino web server prior to R5.0.10 when logging to DOMLOG.NSF. The vulnerability can be triggered by a long HTTP Authenticate header containing certain non-ASCII characters, allowing a remote attacker to cause a denial of service and potentia...

CVE-2004-1624

CVE-2004-1624 affects Carbon Copy 6.0.5257. The issue: CCW32.exe (help topic interface) launches external programs (Notepad) without dropping system privileges, and the Carbon Copy Scheduler (CCSched.exe) help button similarly spawns external processes. Root cause: failure to drop privileges when...