Microsoft Windows Kernel NULL Pointer Dereference Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. The vulnerability stems from a NULL-pointer dereference. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful exploits will resu...

BigAnt Server Detection (HTTP)

HTTP based detection of BigAnt Server. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.100280";...

BigAnt IM Server Detection

This host is running BigAnt IM Server, a instant messaging solution for enterprise. OpenVAS Vulnerability Test $Id: BigAntdetect.nasl 6032 2017-04-26 09:02:50Z teissa $ BigAnt IM Server Detection Authors: Michael Meyer Copyright: Copyright c 2009 Greenbone Networks GmbH This program is free...

RedHat Security Advisory RHSA-2009:1453

The remote host is missing updates announced in advisory RHSA-2009:1453. Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. Info/Query IQ is an Extensible Messaging and Presence Protocol XMPP specific request-respons...

finch, libpurple, pidgin security update

CentOS Errata and Security Advisory CESA-2009:1453 Updated pidgin packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pidgin is an instant messaging...

Pidgin: NULL pointer dereference by processing a custom smiley (DoS)

The XMPP protocol plugin in libpurple in Pidgin before 2.6.2 does not properly handle an error IQ stanza during an attempted fetch of a custom smiley, which allows remote attackers to cause a denial of service application crash via XHTML-IM content with cid: images...

BigAnt Server 2.50 SP1 Buffer Overflow

This exploits a stack buffer overflow in the BigAnt Messaging Service, part of the BigAnt Server product suite. This module was tested successfully against version 2.50 SP1. This module requires Metasploit: https://metasploit.com/download Current source:...

Novell Groupwise Client 7.0.3.1294 ActiveX Denial of Service PoC

No description provided by source. Application: Novell Groupwise Client 7.0.3.1294 Platforms: Windows XP Professional French SP2 and SP3 crash: IE 6.0.2900.2180 Exploitation: remote DoS Date: 2009-08-24 Author: Francis Provencher Protek Research Lab's 1 Introduction 2 Technical details and bug 3...

Pidgin < 2.6.1 Multiple Vulnerabilities

The version of Pidgin installed on the remote host is earlier than 2.6.1. Such versions are reportedly affected by one or more of following issues : - The Yahoo protocol plugin may crash when receiving an IM from any user that contains a URL. CVE-2009-3025 - The XMPP protocol plugin can be tricke...

Microsoft Windows TCP/IP TimeStamps Remote Code Execution Vulnerability

Description Microsoft Windows TCP/IP protocol implementation is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful attacks will completely compromise affected computers. Technologies Affected Avaya...

Microsoft Windows TCP/IP Orphaned Connection Remote Denial of Service Vulnerability

Description Microsoft Windows TCP/IP protocol implementation is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to crash the affected computer, denying service to legitimate users. Technologies Affected Avaya Messaging Application Server Avaya Messaging...

Microsoft DHTML Editing Component ActiveX Control Remote Code Execution Vulnerability

Description The Microsoft DHTML Editing Component ActiveX control is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing an unsuspecting to view a malicious webpage. Successful exploits will allow the attacker to execute arbitrary code within the context...

Microsoft to Ship Mandatory Live Messenger Security Patch

Microsoft plans to force a mandatory Windows Live Messenger upgrade later this month to fix a security vulnerability that could lead to remote code execution attacks. The vulnerability, caused by an extra character in the Microsoft Active Template Library ATL, affects users of Windows Live...

RedHat Security Advisory RHSA-2009:1218

The remote host is missing updates announced in advisory RHSA-2009:1218. Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. Federico Muttis of Core Security Technologies discovered a flaw in Pidgin's MSN protocol...

RedHat Security Advisory RHSA-2009:1218

The remote host is missing updates announced in advisory RHSA-2009:1218. Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. Federico Muttis of Core Security Technologies discovered a flaw in Pidgin...

DEBIAN-CVE-2009-3025

Unspecified vulnerability in Pidgin 2.6.0 allows remote attackers to cause a denial of service crash via a link in a Yahoo IM...

[SECURITY] Fedora 11 Update: pidgin-2.6.1-1.fc11

Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just...

[SECURITY] Fedora 10 Update: pidgin-2.6.1-1.fc10

Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just...

[SECURITY] Fedora 11 Update: pidgin-2.6.0-1.fc11

Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just...

[SECURITY] Fedora 10 Update: pidgin-2.6.0-1.fc10

Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, SILC, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just...