Mandriva Linux Security Advisory : libotr (MDVSA-2013:097)

A vulnerability was found and corrected in libotr : Just Ferguson discovered that libotr, an off-the-record OTR messaging library, can be forced to perform zero-length allocations for heap buffers that are used in base64 decoding routines. An attacker can exploit this flaw by sending crafted...

SuSE 11.2 Security Update : libotr (SAT Patch Number 7076)

This update fixes various heap overflows in libotr. CVE-2012-3461 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc...

SuSE 10 Security Update : libotr (ZYPP Patch Number 8377)

This update fixes various heap overflows in libotr. CVE-2012-3461 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid63072;...

Fedora 18 : libotr-3.2.1-1.fc18 (2012-11900)

Updated to 3.2.1, updates patch for rhbz846377, CVE-2012-3461 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora Update for libotr FEDORA-2012-11959

Check for the Version of libotr OpenVAS Vulnerability Test Fedora Update for libotr FEDORA-2012-11959 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

FreeBSD Ports: libotr

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Fedora Update for libotr FEDORA-2012-11959

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Debian Security Advisory DSA 2526-1 (libotr)

The remote host is missing an update to libotr announced via advisory DSA 2526-1. OpenVAS Vulnerability Test $Id: deb25261.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2526-1 libotr Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Fedora 17 : libotr-3.2.1-1.fc17 (2012-11959)

Updated to 3.2.1, updates patch for rhbz846377, CVE-2012-3461 Patch for multiple heap-based buffer overflows in the Base64 decoder Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

Fedora 16 : libotr-3.2.1-1.fc16 (2012-11934)

Updated to 3.2.1, updates patch for rhbz846377, CVE-2012-3461 Patch for multiple heap-based buffer overflows in the Base64 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...

DEBIAN-CVE-2012-3461

The 1 otrlbase64otrdecode function in src/b64.c; 2 otrlprotodatareadflags and 3 otrlprotoacceptdata functions in src/proto.c; and 4 decode function in toolkit/parse.c in libotr before 3.2.1 allocates a zero-length buffer when decoding a base64 string, which allows remote attackers to cause a deni...

CVE-2012-3461

The 1 otrlbase64otrdecode function in src/b64.c; 2 otrlprotodatareadflags and 3 otrlprotoacceptdata functions in src/proto.c; and 4 decode function in toolkit/parse.c in libotr before 3.2.1 allocates a zero-length buffer when decoding a base64 string, which allows remote attackers to cause a deni...

CVE-2012-3461

The CVE-2012-3461 issue affects the libotr library (Base64 decoding paths: otrl_base64_otr_decode in b64.c; data read/accept in proto.c; and decode in toolkit/parse.c). Public docs indicate that before 3.2.1, libotr allocated a zero-length or insufficient buffer during base64 decoding, enabling a...

[USN-1541-1] libotr vulnerability

========================================================================== Ubuntu Security Notice USN-1541-1 August 16, 2012 libotr vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

Mandriva Update for libotr MDVSA-2012:131 (libotr)

Check for the Version of libotr OpenVAS Vulnerability Test Mandriva Update for libotr MDVSA-2012:131 libotr Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

CVE-2012-3461

The 1 otrlbase64otrdecode function in src/b64.c; 2 otrlprotodatareadflags and 3 otrlprotoacceptdata functions in src/proto.c; and 4 decode function in toolkit/parse.c in libotr before 3.2.1 allocates a zero-length buffer when decoding a base64 string, which allows remote attackers to cause a deni...

CVE-2010-3461

SQL injection vulnerability in the Publisher module in eNdonesia 8.4 allows remote attackers to execute arbitrary SQL commands via the artid parameter in a printarticle action to mod.php, a different vector than CVE-2007-3394...

CVE-2010-3461

CVE-2010-3461 (and related CVE-2007-3394) are concrete SQL injection vulnerabilities in eNdonesia 8.4. The issue affects the Publisher module and allows remote attackers to execute arbitrary SQL via the artid parameter (to mod.php) and, for CVE-2007-3394, via the bid parameter to banners.php (in ...

CVE-2010-3461

creationtimestamp| type| source ---|---|--- 2010-09-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15006...

CVE-2009-3461

Adobe Acrobat 9.x before 9.2 is affected by an unspecified vulnerability that allows bypassing intended file-extension restrictions via unknown vectors. The issue affects Acrobat on affected builds and can lead to complete confidentiality/integrity/availability impact per CVSS 9.3. Remediation re...