336 matches found
[SECURITY] Fedora 18 Update: weechat-0.3.8-3.fc18
WeeChat Wee Enhanced Environment for Chat is a portable, fast, light and extensible IRC client. Everything can be done with a keyboard. It is customizable and extensible with scripts...
Fedora 18 : weechat-0.3.8-3.fc18 (2012-17950)
Fix buffer overflow when parsing IRC colors. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
FreeBSD : weechat -- Crash or freeze when decoding IRC colors in strings (e02c572f-2af0-11e2-bb44-003067b2972c)
Sebastien Helleu reports : A buffer overflow is causing a crash or freeze of WeeChat when decoding IRC colors in strings. Workaround for a non-patched version : /set irc.network.colorsreceive off %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...
weechat -- Crash or freeze when decoding IRC colors in strings
Sebastien Helleu reports: A buffer overflow is causing a crash or freeze of WeeChat when decoding IRC colors in strings. Workaround for a non-patched version: /set irc.network.colorsreceive off...
Fedora Update for weechat FEDORA-2011-7843
Check for the Version of weechat OpenVAS Vulnerability Test Fedora Update for weechat FEDORA-2011-7843 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Fedora Update for weechat FEDORA-2011-7843
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for weechat FEDORA-2011-7839
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for weechat FEDORA-2011-7839
Check for the Version of weechat OpenVAS Vulnerability Test Fedora Update for weechat FEDORA-2011-7839 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Fedora 14 : weechat-0.3.5-1.fc14 (2011-7839)
Update to most recent + spell-aspell rename. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Fedora 15 : weechat-0.3.5-1.fc15 (2011-7843)
Update to most recent + spell-aspell rename. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
[SECURITY] Fedora 14 Update: weechat-0.3.5-1.fc14
WeeChat Wee Enhanced Environment for Chat is a portable, fast, light and extensible IRC client. Everything can be done with a keyboard. It is customizable and extensible with scripts...
[SECURITY] Fedora 15 Update: weechat-0.3.5-1.fc15
WeeChat Wee Enhanced Environment for Chat is a portable, fast, light and extensible IRC client. Everything can be done with a keyboard. It is customizable and extensible with scripts...
DEBIAN-CVE-2011-1428
Wee Enhanced Environment for Chat aka WeeChat 0.3.4 and earlier does not properly verify that the server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof an SSL chat server via an arbitrary certificate, related to incorrect...
CVE-2011-1428
Wee Enhanced Environment for Chat aka WeeChat 0.3.4 and earlier does not properly verify that the server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof an SSL chat server via an arbitrary certificate, related to incorrect...
Code injection
Wee Enhanced Environment for Chat aka WeeChat 0.3.4 and earlier does not properly verify that the server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof an SSL chat server via an arbitrary certificate, related to incorrect...
UBUNTU-CVE-2011-1428
Wee Enhanced Environment for Chat aka WeeChat 0.3.4 and earlier does not properly verify that the server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof an SSL chat server via an arbitrary certificate, related to incorrect...
CVE-2011-1428
WeeChat (Wee Enhanced Environment for Chat) versions up to 0.3.4 are affected by CVE-2011-1428, where the client does not properly validate that the server hostname matches the subject of an X.509 certificate, enabling MITM with an arbitrary certificate due to incorrect GnuTLS API usage. Exploita...
CVE-2011-1428
Wee Enhanced Environment for Chat aka WeeChat 0.3.4 and earlier does not properly verify that the server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof an SSL chat server via an arbitrary certificate, related to incorrect...
weechat does not properly use gnutls and allow an attacker to bypass certificate verification
About WeeChat: "WeeChat is a fast, light and extensible chat client. It runs on many platforms including Linux, BSD and Mac OS. Development is very active, and bug fixes are very fast!" The vuln: Weechat does not use the GnuTLS API properly to check certificates, potentially exposing users to...