4498 matches found
CVE-2012-2214
proxy.c in libpurple in Pidgin before 2.10.4 does not properly handle canceled SOCKS5 connection attempts, which allows user-assisted remote authenticated users to cause a denial of service application crash via a sequence of XMPP file-transfer requests...
CVE-2012-2214
proxy.c in libpurple in Pidgin before 2.10.4 does not properly handle canceled SOCKS5 connection attempts, which allows user-assisted remote authenticated users to cause a denial of service application crash via a sequence of XMPP file-transfer requests...
PT-2012-3887
Name of the Vulnerable Software and Affected Versions Pidgin versions prior to 2.10.4 Description The issue arises from improper handling of canceled SOCKS5 connection attempts in proxy.c in libpurple, allowing user-assisted remote authenticated users to cause a denial of service, resulting in an...
The Hidden Security Risks of P2P Traffic
For years enterprises have been trying to control peer-to-peer P2P technologies inside their networks, and for good reason. The efficiency with which P2P technology move large files have made P2P networks key enablers of the Internet grey market by acting as the distribution mechanism of choice f...
Globus Toolkit GridFTP Server Detection
The remote host has an installation of GridFTP server, which offers file transfer functionality. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid59733; scriptversion"1.4"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"Globus Toolkit GridFTP Server Detection";...
SuSE 10 Security Update : finch, libpurple, and pidgin (ZYPP Patch Number 8131)
Various remote triggerable crashes in pidgin have been fixed : - In some situations the MSN server sends text that isn't UTF-8 encoded, and Pidgin fails to verify the text's encoding. In some cases this can lead to a crash when attempting to display the text . CVE-2012-1178 - Incoming messages wi...
Multi Gather Skype User Data Enumeration
This module will enumerate Skype account settings, contact list, call history, chat logs, file transfer history, and voicemail logs, saving all the data to CSV files for analysis. This module requires Metasploit: https://metasploit.com/download Current source:...
Pidgin <2.10.4 XMPP协议文件传输请求处理远程拒绝服务漏洞
BUGTRAQ ID: 53706 CVE ID: CVE-2012-2214 Pidgin是一款多合一世界主流即时通讯软件集成工具。 Pidgin 2.10.4之前版本在处理一系列特制的文件传输请求时刻造成客户端引用无效内存，用户接受了其中一个文件传输请求后，可造成受影响应用崩溃。 0 Pidgin 2.10.4 厂商补丁： Pidgin ------ Pidgin已经为此发布了一个安全公告（CVE-2012-2214）以及相应补丁: CVE-2012-2214：XMPP remote crash 链接：http://www.pidgin.im/news/security/?id=62...
Pidgin < 2.10.4 Multiple DoS Vulnerabilities
The version of Pidgin installed on the remote host is earlier than 2.10.4 and is, therefore, potentially affected by the following issues : - An error exists in the file 'libpurple/proxy.c' that can allow certain file transfer requests to an invalid pointer to be dereferenced, leading to...
FreeBSD : libpurple -- Invalid memory dereference in the XMPP protocol plug-in by processing a series of specially crafted file transfer requests (64f8b72d-9c4e-11e1-9c94-000bcdf0a03b)
Pidgin reports : A series of specially crafted file transfer requests can cause clients to reference invalid memory. The user must have accepted one of the file transfer requests. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
libpurple -- Invalid memory dereference in the XMPP protocol plug-in by processing serie of specially-crafted file transfer requests
Pidgin reports: A series of specially crafted file transfer requests can cause clients to reference invalid memory. The user must have accepted one of the file transfer requests...
Disaster Recovery Disaster: Drill Gone Wrong Leads To Loss Of Data On 800K
Call it a disaster recovery drill disaster. The loss of four magnetic tape cartridges containing data on 800,000 California residents was the unfortunate result of an IBM-managed disaster recovery exercise gone wrong, said Christine Lally, Assistant Secretary, Legislation & Communications for the...
FlashFXP v4.1.8.1701 - Buffer Overflow Vulnerability
Title: ====== FlashFXP v4.1.8.1701 - Buffer Overflow Vulnerability Date: ===== 2012-03-01 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=462 VL-ID: ===== 462 Introduction: ============= FlashFXP is a FTP File Transfer Protocol client for Windows, it offers you easy and...
FlashFXP 4.1.8.1701 Buffer Overflow
Title: ====== FlashFXP v4.1.8.1701 - Buffer Overflow Vulnerability Date: ===== 2012-03-01 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=462 VL-ID: ===== 462 Introduction: ============= FlashFXP is a FTP File Transfer Protocol client for Windows, it offers you easy and...
Skype v5.6.59.x - Memory Corruption Vulnerability
Title: ====== Skype v5.6.59.x - Memory Corruption Vulnerability Date: ===== 2012-02-17 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=315 VL-ID: ===== 315 Introduction: ============= Skype is a software application that allows users to make voice and video calls and...
Skype memory corruption
Memory corruption on file transfer...
Skype v5.6.59.x - Memory Corruption Vulnerability
Document Title: =============== Skype v5.6.59.x - Memory Corruption Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=315 Release Date: ============= 2012-02-16 Vulnerability Laboratory ID VL-ID: ==================================== 315 Commo...
Yahoo! Messenger buffer overflow
Buffer overflow on file transfer...