openSUSE 10 Security Update : gaim (gaim-5421)

specially crafted MSN SLP messages could cause an integer overflow in gaim. Attackers could potentially exploit that to execute arbitrary code CVE-2008-2927. Additionally a problem was fixed that prevented gaim clients from connecting to the ICQ network after a server change on July 1st 2008...

ZDI-08-054: Multiple Vendor libpurple MSN Protocol SLP Message Heap Overflow Vulnerability

ZDI-08-054: Multiple Vendor libpurple MSN Protocol SLP Message Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-054 August 28, 2008 -- CVE ID: CVE-2008-2927 -- Affected Vendors: Adium Pidgin -- Affected Products: Adium Adiumx Pidgin Pidgin -- Vulnerability Details:...

Pidgin MSN SLP Message Integer Overflow Vulnerabilities (Linux)

The host is running Pidgin, which is prone to integer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodpidginintgroverflowlin900009.nasl 7823 2017-11-20 08:54:04Z cfischer $ Description: Pidgin MSN SLP Message Integer Overflow Vulnerabilities Linux Authors: Chandan S Copyright:...

[SECURITY] [DSA 1610-1] New gaim packages fix execution of arbitrary code

------------------------------------------------------------------------ Debian Security Advisory DSA-1610-1 [email protected] http://www.debian.org/security/ Steve Kemp July 15, 2008 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

CentOS 3 / 4 / 5 : pidgin (CESA-2008:0584)

Updated Pidgin packages that fix a security issue and address a bug are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Pidgin is a multi-protocol Internet Messaging client. An integer...

CVE-2008-2927

CVE-2008-2927 affects the MSN protocol handler in libpurple (msn/slplink.c and msnp9/slplink.c) used by Pidgin before 2.4.3 and Adium before 1.3. It is caused by multiple integer overflow/offset handling issues in msn_slplink_process_msg triggered by a malformed SLP message, enabling remote arbit...

CVE-2007-2927

CVE-2007-2927 affects Atheros 802.11 a/b/g wireless driver for Windows. The vulnerability arises from how the affected drivers handle malformed 802.11 management frames, enabling an unauthenticated, remote attacker within radio range to trigger a denial-of-service condition by sending specially c...

CVE-2006-2927

The CVE-2006-2927 entry concerns CodeAvalanche FreeForum (aka CAForum) 1.0, where multiple XSS vulnerabilities exist in post.asp. The affected component is the post.asp handler; the vulnerability allows an attacker to inject arbitrary script or HTML via the msg_subject or msg_body parameters. The...

CVE-2005-2927

Stack-based buffer overflow in ppp in SCO Unixware 7.1.3 and 7.1.4, and possibly earlier versions, allows local users to execute arbitrary code via a long argument to the 1 prompt or 2 defprompt command...

CVE-2005-2927

CVE-2005-2927: Local buffer overflow in SCO UnixWare 7.1.3/7.1.4 (ppp prompt/defprompt) allows local users to run arbitrary code due to an unchecked long argument to the ppp binary (ppptalk) where the binary is setuid root. Vulnerable binaries include /usr/bin/ppptalk; impact is root privilege es...

[Full-disclosure] iDEFENSE Security Advisory 10.24.05: SCO Unixware Setuid ppp prompt Buffer Overflow Vulnerability

SCO Unixware Setuid ppp prompt Buffer Overflow Vulnerability iDEFENSE Security Advisory 10.24.05 http://www.idefense.com/application/poi/display?type=vulnerabilities October 24, 2005 I. BACKGROUND SCO UnixWare is a UNIX operating system. More information is available at:...

[Full-disclosure] UnixWare 7.1.4 UnixWare 7.1.3 : ppp buffer overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SCO Security Advisory Subject: UnixWare 7.1.4 UnixWare 7.1.3 : ppp buffer overflow Advisory number: SCOSA-2005.41 Issue date: 2005 October 20 Cross reference: sr894991 fz532994 erg712940 CAN-2005-2927 1. Problem Description iDEFENSE has identified a...