874 matches found
Mandrake Security Advisory MDVSA-2009:173 (pidgin)
The remote host is missing an update to pidgin announced via advisory MDVSA-2009:173. OpenVAS Vulnerability Test $Id: mdksa2009173.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:173 pidgin Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...
Mediacoder 0.6.2.4275 - '.lst' Local Stack Buffer Overflow
!/usr/bin/perl MediaCoder 0.6.2.4275 .lst Stack Based Overflow Discovered by : SKULL-HACKER my $header = "\x5B\x70\x6C\x61\x79\x6C\x69\x73\x74\x5D\x0A\x46\x69\x6C\x65\x31\x3D"; my $junk = "\x41" x 254; my $ret = "\x93\x43\x92\x7c"; my $nop = "\x90" x 25; win32exec - EXITFUNC=seh CMD=calc.exe...
[Backports-security-announce] Security Update for pidgin
Gerfried Fuchs uploaded new packages for pidgin which fixed the following security problems: CVE-2009-1373 Buffer overflow in the XMPP SOCKS5 bytestream server in Pidgin formerly Gaim before 2.5.6 allows remote authenticated users to execute arbitrary code via vectors involving an outbound XMPP...
openSUSE Security Update : finch (finch-188)
specially crafted MSN SLP messages could cause an integer overflow in pidgin. Attackers could potentially exploit that to execute arbitrary code CVE-2008-2927. - overly long file names in MSN file transfers could crash pidgin CVE-2008-2955. - SSL certifcates were not verfied. Therefore piding...
MSN Username Detection (deprecated)
Binary data 7011.pasl...
Fedora Core 11 FEDORA-2009-7359 (pidgin)
The remote host is missing an update to pidgin announced via advisory FEDORA-2009-7359. OpenVAS Vulnerability Test $Id: fcore20097359.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-7359 pidgin Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...
Mandrake Security Advisory MDVSA-2009:147 (pidgin)
The remote host is missing an update to pidgin announced via advisory MDVSA-2009:147. OpenVAS Vulnerability Test $Id: mdksa2009147.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:147 pidgin Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...
Fedora Core 10 FEDORA-2009-7370 (pidgin)
The remote host is missing an update to pidgin announced via advisory FEDORA-2009-7370. OpenVAS Vulnerability Test $Id: fcore20097370.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-7370 pidgin Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...
Mandrake Security Advisory MDVSA-2009:147 (pidgin)
The remote host is missing an update to pidgin announced via advisory MDVSA-2009:147. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...
Fedora Core 11 FEDORA-2009-7359 (pidgin)
The remote host is missing an update to pidgin announced via advisory FEDORA-2009-7359. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
Fedora Core 9 FEDORA-2009-7415 (pidgin)
The remote host is missing an update to pidgin announced via advisory FEDORA-2009-7415. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
Cross site scripting
Cross-site scripting XSS vulnerability in XMB 1.5 allows remote attackers to inject arbitrary web script or HTML via the MSN field during user registration...
CVE-2007-6728
CVE-2007-6728 – confirmed XSS in XMB 1.5. The vulnerability affects the MSN field during user registration, allowing an attacker to inject arbitrary web script or HTML. The issue is a cross-site scripting flaw in XMB 1.5 as described in the CVE entry and cross-referenced records. The available da...
CVE-2007-6728: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in XMB 1.5 allows remote attackers to inject arbitrary web script or HTML via the MSN field during user registration...
Mandriva Linux Security Advisory : pidgin (MDVSA-2009:147)
Security vulnerabilities has been identified and fixed in pidgin : Buffer overflow in the XMPP SOCKS5 bytestream server in Pidgin formerly Gaim before 2.5.6 allows remote authenticated users to execute arbitrary code via vectors involving an outbound XMPP file transfer. NOTE: some of these detail...
Trillian MSN验证SSL证书校验安全绕过漏洞
Bugraq ID: 35509 Trillian是一款聊天程序，和多种即时通讯程序使用相同的接口，包括AIM、ICQ、Yahoo! Messenger、MSN Messenger和IRC。 Trillian在发送MSN用户凭据前没有正确检查SSL证书，攻击者可以通过伪造的证书，在没有任何警告的境况下获得MSN用户名和密码信息。 Cerulean Studios Trillian 3.1 目前没有详细解决方案提供： http://www.ceruleanstudios.com/...
Mandrake Security Advisory MDVSA-2009:140 (gaim)
The remote host is missing an update to gaim announced via advisory MDVSA-2009:140. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...
Mandrake Security Advisory MDVSA-2009:140 (gaim)
The remote host is missing an update to gaim announced via advisory MDVSA-2009:140. OpenVAS Vulnerability Test $Id: mdksa2009140.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:140 gaim Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
Trillian SSL Certificate Vulnerability
Trillian SSL Certificate Vulnerability I. The Vulnerability Trillian does not check SSL certificate before sending MSN user credentials. An attacker is able to obtain MSN username and password with a spoofed certificate and no alert is generated to the user. This vulnerability was found in Trilli...