CVE-2017-2448

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. The issue involves the "Keychain" component. It allows man-in-the-middle attackers to bypass an iCloud Keychain secret protection mechanism by leveraging...

Authentication flaw

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. The issue involves the "Keychain" component. It allows man-in-the-middle attackers to bypass an iCloud Keychain secret protection mechanism by leveraging...

CVE-2017-2448

CVE-2017-2448 is an Apple Keychain vulnerability affecting iOS < 10.3, macOS < 10.12.4, and tvOS

CVE-2017-2448: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. The issue involves the "Keychain" component. It allows man-in-the-middle attackers to bypass an iCloud Keychain secret protection mechanism by leveraging...

Apple TV < 10.2 Multiple Vulnerabilities

Binary data 700035.prm...

Updated irssi-otr packages fix security vulnerability

It was discovered that irssi-otr had a flaw in handing data returned by libotr. After the initiation of the OTR session only the first line was sent as a PRIVMSG, while additional data would be sent as raw commands to the IRC server. The additional data would ordinarily be a human-readable...

MGASA-2017-0043 Updated irssi-otr packages fix security vulnerability

It was discovered that irssi-otr had a flaw in handing data returned by libotr. After the initiation of the OTR session only the first line was sent as a PRIVMSG, while additional data would be sent as raw commands to the IRC server. The additional data would ordinarily be a human-readable...

Information disclosure

The OTR plugin for Gajim sends information in cleartext when using XHTML, which allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2016-9107

The OTR plugin for Gajim sends information in cleartext when using XHTML, which allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2016-9107

CVE-2016-9107 concerns the Gajim OTR plugin, where information is sent in cleartext when using XHTML. This leads to a potential information disclosure vulnerability, allowing remote attackers to obtain sensitive data via unspecified vectors. The affected component is the Gajim OTR plugin; the roo...

CVE-2016-9107

The OTR plugin for Gajim sends information in cleartext when using XHTML, which allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2016-9107: Exposure of Sensitive Information to an Unauthorized Actor

The OTR plugin for Gajim sends information in cleartext when using XHTML, which allows remote attackers to obtain sensitive information via unspecified vectors...

openSUSE Security Update : kopete (openSUSE-2017-19)

This update for kopete fixes the following issues : - fix encrypting OTR messages after closing and re-opening kopete boo1016982, kde362535 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

OPENSUSE-SU-2017:0035-1 Security update for kopete

This update for kopete fixes the following issues: - fix encrypting OTR messages after closing and re-opening kopete boo1016982, kde362535...

OPENSUSE-SU-2017:0034-1 Security update for kopete

This update for kopete fixes the following issues: - fix encrypting OTR messages after closing and re-opening kopete boo1016982, kde362535...

GLSA-201701-10 : libotr, Pidgin OTR: Remote execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201701-10 libotr, Pidgin OTR: Remote execution of arbitrary code Multiple vulnerabilities exist in both libotr and Pidgin OTR. Please review the CVE identifiers for more information. Impact : A remote attacker could send a special...

openSUSE Security Update : irc-otr (openSUSE-2016-1529)

This updates irc-otr to version 1.0.2 and fixes the following issues : - Only the first line of messages transmitted via OTR sessions was a PRIVMSG and additional data was sent as a raw command to the IRC server boo1016942. - Detect the libotr-emitted HTML-formatted init string and replace it wit...

openSUSE Security Update : mcabber (openSUSE-2016-1502)

This update for mcabber fixes the following issues : - Update to version 1.0.4 changes since 1.0.2 : - Check the origin of roster pushes boo1014976, CVE-2015-8688 Gajim, https://gultsch.de/gajimrosterpushandmessageinterce ption.html - Link with the tinfo library. - Fix default modules directory o...

CVE-2015-8833

Use-after-free vulnerability in the createsmpdialog function in gtk-dialog.c in the Off-the-Record Messaging OTR pidgin-otr plugin before 4.0.2 for Pidgin allows remote attackers to execute arbitrary code via vectors related to the "Authenticate buddy" menu item...

DEBIAN-CVE-2015-8833

Use-after-free vulnerability in the createsmpdialog function in gtk-dialog.c in the Off-the-Record Messaging OTR pidgin-otr plugin before 4.0.2 for Pidgin allows remote attackers to execute arbitrary code via vectors related to the "Authenticate buddy" menu item...