CVE-2013-3393

The CVE-2013-3393 issue affects Cisco’s Precision Video Engine used by Cisco Jabber for Windows and Cisco Virtualization Experience Media Engine. The root cause is improper handling of crafted RTP packets, which can be sent remotely to trigger a denial of service, causing process crashes and disc...

CVE-2013-3393: Improper Input Validation

The Precision Video Engine component in Cisco Jabber for Windows and Cisco Virtualization Experience Media Engine allows remote attackers to cause a denial of service process crash and call disconnection via crafted RTP packets, aka Bug IDs CSCuh60706 and CSCue21117...

PT-2013-4350

Name of the Vulnerable Software and Affected Versions Cisco Jabber for Windows affected versions not specified Cisco Virtualization Experience Media Engine affected versions not specified Description The issue allows remote attackers to cause a denial of service, resulting in a process crash and...

Updated telepathy-gabble package fixes security vulnerability

Maksim Otstavnov discovered that the Wocky submodule used by telepathy-gabble does not respect the tls-required flag on legacy Jabber servers. A network intermediary could use this vulnerability to bypass TLS verification and perform a man-in-the-middle attack...

PT-2013-1087

Name of the Vulnerable Software and Affected Versions Telepathy Gabble versions prior to 0.16.6 Telepathy Gabble versions 0.17.x prior to 0.17.4 Description The issue allows remote attackers to bypass TLS verification, potentially leading to man-in-the-middle attacks when connecting to a "legacy...

telepathy-gabbleprotection bypass

TLS required flag is ignored on jabber network...

Ubuntu Update for telepathy-gabble USN-1873-1

Check for the Version of telepathy-gabble OpenVAS Vulnerability Test $Id: gbubuntuUSN18731.nasl 7958 2017-12-01 06:47:47Z santu $ Ubuntu Update for telepathy-gabble USN-1873-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This progra...

Ubuntu 12.04 LTS / 12.10 / 13.04 : telepathy-gabble vulnerabilities (USN-1873-1)

Maksim Otstavnov discovered that telepathy-gabble incorrectly handled TLS when connecting to legacy jabber servers. If a remote attacker were able to perform a man-in-the-middle attack, this flaw could be exploited to view sensitive information. CVE-2013-1431 It was discovered that telepathy-gabb...

USN-1873-1: telepathy-gabble vulnerabilities

Maksim Otstavnov discovered that telepathy-gabble incorrectly handled TLS when connecting to legacy jabber servers. If a remote attacker were able to perform a machine-in-the-middle attack, this flaw could be exploited to view sensitive information. CVE-2013-1431 It was discovered that...

Fedora Update for telepathy-gabble FEDORA-2013-9794

Check for the Version of telepathy-gabble OpenVAS Vulnerability Test Fedora Update for telepathy-gabble FEDORA-2013-9794 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modi...

[SECURITY] Fedora 18 Update: telepathy-gabble-0.16.6-1.fc18

A Jabber/XMPP connection manager, that handles single and multi-user chats and voice calls...

[SECURITY] Fedora 19 Update: telepathy-gabble-0.17.4-1.fc19

A Jabber/XMPP connection manager, that handles single and multi-user chats and voice calls...

[SECURITY] [DSA 2702-1] telepathy-gabble security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2702-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso June 03, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2702-1] telepathy-gabble security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2702-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso June 03, 2013 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2702-1 (telepathy-gabble - TLS verification bypass)

Maksim Otstavnov discovered that the Wocky submodule used by telepathy-gabble, the Jabber/XMPP connection manager for the Telepathy framework, does not respect the tls-required flag on legacy Jabber servers. A network intermediary could use this vulnerability to bypass TLS verification and perfor...

DSA-2702-1 telepathy-gabble - TLS verification bypass

Bulletin has no description...

CVE-2013-1431

The Wocky module in Telepathy Gabble before 0.16.6 and 0.17.x before 0.17.4, when connecting to a "legacy Jabber server," does not properly enforce the WockyConnector:tls-required flag, which allows remote attackers to bypass TLS verification and perform a man-in-the-middle attacks...

telepathy-gabble -- TLS verification bypass

Simon McVittie reports: This release fixes a man-in-the-middle attack. If you use an unencrypted connection to a "legacy Jabber" pre-XMPP server, this version of Gabble will not connect until you make one of these configuration changes: . upgrade the server software to something that supports XMP...

CVE-2013-1187

The Connection Manager in Cisco Jabber Extensible Communications Platform aka Jabber XCP does not properly validate login data, which allows remote attackers to cause a denial of service service crash by sending a series of malformed login packets, aka Bug ID CSCts76762...

Design/Logic Flaw

The Connection Manager in Cisco Jabber Extensible Communications Platform aka Jabber XCP does not properly validate login data, which allows remote attackers to cause a denial of service service crash by sending a series of malformed login packets, aka Bug ID CSCts76762...