CVE-2014-0666

Cisco Jabber for Windows is affected by a directory traversal vulnerability in the Send Screen Capture feature (CVE-2014-0666). Affected: Jabber for Windows 9.x before 9.2(2) (Windows). Root cause: input validation issue in the Send Screen Capture flow that could traverse directories and write ar...

CVE-2014-0666

Directory traversal vulnerability in the Send Screen Capture implementation in Cisco Jabber 9.2.1 and earlier on Windows allows remote attackers to upload arbitrary types of files, and consequently execute arbitrary code, via modified packets, aka Bug ID CSCug48056...

CVE-2014-0666: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Send Screen Capture implementation in Cisco Jabber 9.2.1 and earlier on Windows allows remote attackers to upload arbitrary types of files, and consequently execute arbitrary code, via modified packets, aka Bug ID CSCug48056...

PT-2014-3761

Name of the Vulnerable Software and Affected Versions Cisco Jabber versions 9.2.1 and earlier Description A directory traversal issue in the Send Screen Capture feature allows remote attackers to upload arbitrary files and execute arbitrary code via modified packets. Recommendations For Cisco...

Cisco Jabber for Windows Remote Code Execution Vulnerability

A vulnerability in the Send Screen Capture function of Cisco Jabber for Windows could allow an unauthenticated, remote attacker to install arbitrary files on a targeted system. The vulnerability is due to insufficient validation of data in the packets sent via the send screen capture functionalit...

Cisco Unified Presence Server Web接口SQL注入漏洞

BUGTRAQ ID: 64551 CVECAN ID: CVE-2013-6983 Cisco Unified Presence是由Jabber XMPP驱动的企业级平台，能够收集有关用户可用性和通信功能的信息，以提供统一用户在网状态，为思科统一通信和关键业务应用提供支持基于在网状态的通信。 Cisco Unified Presence Server 8.64版本的Web接口存在安全漏洞，可使经过身份验证的远程攻击者影响受影响系统的机密性、完整性、可用性。此漏洞源于没有正确验证SQL查询内的用户输入。攻击者通过特制的URL，包括SQL语句利用此漏洞。 0 Cisco Unified...

Openfire 3.8.2 server new admin password/add new admin Exploit

This expoit use multiple vulnerabilites in Openfire. Openfire admin must visit exploit link. Attacker can create new admin or change admin password. Openfire is a real time collaboration RTC server licensed under the Open Source Apache License. It uses the only widely adopted open protocol for...

CVE-2013-1228

Cisco Jabber on Windows does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and modify the client-server data stream via a crafted certificate, aka Bug ID CSCug30280...

Code injection

Cisco Jabber on Windows does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and modify the client-server data stream via a crafted certificate, aka Bug ID CSCug30280...

CVE-2013-1228

Cisco Jabber on Windows does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and modify the client-server data stream via a crafted certificate, aka Bug ID CSCug30280...

CVE-2013-1228

CVE-2013-1228 affects Cisco Jabber for Windows. The root cause is a failure to validate X.509 server certificates during SSL, enabling MITMattacks to spoof servers and modify the client–server data stream. Cisco’s advisory confirms a vulnerability in the Windows client and notes impacted software...

PT-2013-2991

Name of the Vulnerable Software and Affected Versions Cisco Jabber on Windows affected versions not specified Description The issue allows man-in-the-middle attackers to spoof servers and modify the client-server data stream via a crafted X.509 certificate, as Cisco Jabber on Windows does not...

CVE-2013-1228: Undefined Security Weakness

Cisco Jabber on Windows does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and modify the client-server data stream via a crafted certificate, aka Bug ID CSCug30280...

Cisco Jabber for Windows Certificate Validation Vulnerability

A vulnerability in Cisco Jabber for Windows could allow an unauthenticated, remote attacker to gain a man-in-the-middle position. The vulnerability is due to a failure to validate server certificates when negotiating a connection over Secure Sockets Layer SSL. An attacker could exploit this...

Oracle Linux 4 : pidgin (ELSA-2009-1453)

From Red Hat Security Advisory 2009:1453 : Updated pidgin packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program...

Fedora 19 : telepathy-gabble-0.17.4-1.fc19 (2013-9753)

"This release fixes a man-in-the-middle attack. If you use an unencrypted connection to a 'legacy Jabber' pre-XMPP server, this version of Gabble will not connect until you make one of these configuration changes : - upgrade the server software to something that supports XMPP 1.0; or - use an...

Fedora 18 : telepathy-gabble-0.16.6-1.fc18 (2013-9794)

"This release fixes a man-in-the-middle attack. If you use an unencrypted connection to a 'legacy Jabber' pre-XMPP server, this version of Gabble will not connect until you make one of these configuration changes : - upgrade the server software to something that supports XMPP 1.0; or - use an...

CVE-2013-3393

The Precision Video Engine component in Cisco Jabber for Windows and Cisco Virtualization Experience Media Engine allows remote attackers to cause a denial of service process crash and call disconnection via crafted RTP packets, aka Bug IDs CSCuh60706 and CSCue21117...

Design/Logic Flaw

The Precision Video Engine component in Cisco Jabber for Windows and Cisco Virtualization Experience Media Engine allows remote attackers to cause a denial of service process crash and call disconnection via crafted RTP packets, aka Bug IDs CSCuh60706 and CSCue21117...

CVE-2013-3393

The Precision Video Engine component in Cisco Jabber for Windows and Cisco Virtualization Experience Media Engine allows remote attackers to cause a denial of service process crash and call disconnection via crafted RTP packets, aka Bug IDs CSCuh60706 and CSCue21117...