CVE-2005-2448

Multiple "endianness errors" in libgadu in ekg before 1.6rc2 allow remote attackers to cause a denial of service invalid behavior in applications on big-endian systems...

FreeBSD : ekg -- insecure temporary file creation (9a035a56-eff0-11d9-8310-0001020eed82)

Eric Romang reports that ekg creates temporary files in an insecure manner. This can be exploited by an attacker using a symlink attack to overwrite arbitrary files and possibly execute arbitrary commands with the permissions of the user running ekg. %NASLMINLEVEL 70300 C Tenable Network Security...

GLSA-200507-26 : GNU Gadu, CenterICQ, Kadu, EKG, libgadu: Remote code execution in Gadu library

The remote host is affected by the vulnerability described in GLSA-200507-26 GNU Gadu, CenterICQ, Kadu, EKG, libgadu: Remote code execution in Gadu library GNU Gadu, CenterICQ, Kadu, EKG and libgadu are vulnerable to an integer overflow. Impact : A remote attacker could exploit the integer overfl...

Debian DSA-767-1 : ekg - integer overflows

Marcin Slusarz discovered two integer overflow vulnerabilities in libgadu, a library provided and used by ekg, a console Gadu Gadu client, an instant messaging program, that could lead to the execution of arbitrary code. The library is also used by other packages such as kopete, which should be...

[SECURITY] [DSA 767-1] New ekg packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 767-1 [email protected] http://www.debian.org/security/ Martin Schulze July 27th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 767-1] New ekg packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 767-1 [email protected] http://www.debian.org/security/ Martin Schulze July 27th, 2005 http://www.debian.org/security/faq -...

DSA-767-1 ekg - integer overflows

Bulletin has no description...

ekg Gadu Gadu client / libgadu multiple vulnerabilities

Symbolic links problem on temporary files creation. Unfiltered shell characters. Libgadu integer overflow. Multiple platform-specific problems...

[ GLSA 200507-26 ] GNU Gadu, CenterICQ, Kadu, EKG, libgadu: Remote code execution in Gadu library

Gentoo Linux Security Advisory GLSA 200507-26 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

CVE-2005-2369

CVE-2005-2369 is a libgadu issue (used by ekg and centericq) with multiple integer signedness errors that can lead to remote denial of service or arbitrary code execution. Connected advisories (Debian DSA-813-1; Ubuntu USN-162-1; CentOS/Nessus entries) confirm the vulnerability and reference libg...

CVE-2005-1852

CVE-2005-1852 describes multiple integer overflows in libgadu used by Kopete (KDE 3.2.3–3.4.1), ekg, GNU Gadu, CenterICQ, Kadu and other packages. These flaws allow a remote attacker to crash the affected application and potentially execute arbitrary code by sending a crafted Gadu-Gadu message. P...

CVE-2005-1852

Multiple integer overflows in libgadu, as used in Kopete in KDE 3.2.3 to 3.4.1, ekg before 1.6rc3, GNU Gadu, CenterICQ, Kadu, and other packages, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an incoming message...

CVE-2005-1852

Removed by vendor...

security flaw

Multiple integer signedness errors in libgadu, as used in ekg before 1.6rc2 and other packages, may allow remote attackers to cause a denial of service or execute arbitrary code...

security flaw

Multiple "endianness errors" in libgadu in ekg before 1.6rc2 allow remote attackers to cause a denial of service invalid behavior in applications on big-endian systems...

security flaw

Multiple "memory alignment errors" in libgadu, as used in ekg before 1.6rc2, Gaim before 1.5.0, and other packages, allows remote attackers to cause a denial of service bus error on certain architectures such as SPARC via an incoming message...

Multiple vulnerabilities in libgadu and ekg package

Multiple vulnerabilities have been found in libgadu, a library for handling Gadu-Gadu instant messaging protocol. It is a part of ekg, a Gadu-Gadu client, but is widely used in other clients. Also some of the user contributed scripts were found to behave in an insecure manner. Bugs fixed in...

CVE-2005-1851

A certain contributed script for ekg Gadu Gadu client 1.5 and earlier allows attackers to execute shell commands via unknown attack vectors...

CVE-2005-1850

Certain contributed scripts for ekg Gadu Gadu client 1.5 and earlier create temporary files insecurely, with unknown impact and attack vectors, a different vulnerability than CVE-2005-1916...

CVE-2005-1850

CVE-2005-1850 concerns ekg Gadu Gadu client (contributed scripts) with insecure temporary file creation in version 1.5 and earlier. Connected entries also reference CVE-2005-1851 (potential shell command injection) and CVE-2005-1916 (insecure temp file creation plus arbitrary command execution) i...