Fedora Update for ekiga FEDORA-2007-321

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for ekiga FEDORA-2007-322

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for ekiga FEDORA-2007-263

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for ekiga FEDORA-2007-262

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for ekiga FEDORA-2007-263

Check for the Version of ekiga OpenVAS Vulnerability Test Fedora Update for ekiga FEDORA-2007-263 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Fedora Update for ekiga FEDORA-2007-322

Check for the Version of ekiga OpenVAS Vulnerability Test Fedora Update for ekiga FEDORA-2007-322 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Fedora Update for ekiga FEDORA-2007-321

Check for the Version of ekiga OpenVAS Vulnerability Test Fedora Update for ekiga FEDORA-2007-321 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Gentoo Security Advisory GLSA 200703-25 (ekiga)

The remote host is missing updates announced in advisory GLSA 200703-25. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200703-25 (ekiga)

The remote host is missing updates announced in advisory GLSA 200703-25. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

USN-562-1: opal vulnerability

Jose Miguel Esparza discovered that certain SIP headers were not correctly validated. A remote attacker could send a specially crafted packet to an application linked against opal e.g. Ekiga causing it to crash, leading to a denial of service...

USN-561-1: pwlib vulnerability

Jose Miguel Esparza discovered that pwlib did not correctly handle large string lengths. A remote attacker could send specially crafted packets to applications linked against pwlib e.g. Ekiga causing them to crash, leading to a denial of service...

Ubuntu 5.10 / 6.06 LTS / 6.10 : ekiga, gnomemeeting vulnerabilities (USN-426-1)

Mu Security discovered a format string vulnerability in Ekiga. If a user was running Ekiga and listening for incoming calls, a remote attacker could send a crafted call request, and execute arbitrary code with the user's privileges. Note that Tenable Network Security has extracted the preceding...

Ubuntu 5.10 / 6.06 LTS / 6.10 : ekiga, gnomemeeting vulnerability (USN-434-1)

It was discovered that Ekiga had format string vulnerabilities beyond those fixed in USN-426-1. If a user was running Ekiga and listening for incoming calls, a remote attacker could send a crafted call request, and execute arbitrary code with the user's privileges. Note that Tenable Network...

Mandrake Linux Security Advisory : opal (MDKSA-2007:205)

A flaw in opal, the Open Phone Abstraction Library, was found in how it handles certain Session Initiation Protocol SIP packets. An attacker could use this vulnerability to crash an application linked to opal, such as Ekiga. Updated packages have been patched to prevent these issues. %NASLMINLEVE...

Mandrake Linux Security Advisory : pwlib (MDKSA-2007:206)

A memory management flaw was discovered in PWLib, that an attacker could use to crash an application linked with it, such as Ekiga. Updated packages have been patched to prevent these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plug...

openSUSE 10 Security Update : ekiga (ekiga-3023)

This update fixes format string problems in ekiga. CVE-2007-1006 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update ekiga-3023. The text description of this plugin is C SUSE LLC...

Opal library / Ekiga memory corruption

Insufficient SIP Content-Length validation allows to overwrite single byte of memory...

S21SEC-037-en: OPAL SIP Protocol Remote Denial of Service

S21Sec Advisory - Title: OPAL SIP Protocol Remote Denial of Service ID: S21SEC-037-en Severity: Medium - Remote DoS History: 11.Jun.2007 Vulnerability discovered 09.Jul.2007 Vendor contacted 15.Aug.2007 Patched 17.Sep.2007 New version released Scope: Remote Denial of Service Platforms: Any...

OpenH323 Opal库SIP协议远程拒绝服务漏洞

BUGTRAQ ID: 25955 CVECAN ID: CVE-2007-4924 Openh323是为开发使用H.323协议在IP网上进行多媒体通信的应用程序而专门设计的全功能协议栈。 Openh323的实现在处理畸形格式的SIP报文时存在漏洞，远程攻击者可能利用此漏洞导致用户的系统崩溃。 OpenH323所使用的opal库的sip/sippdu.cxx文件中SIPPDU::Read方式没有正确地处理SIP报文头中的Content-Length字段，如果远程攻击者向使用了该库的应用程序发送了畸形的SIP报文的话，就可能向任意内存位置写入“\0”字节，导致拒绝服务。 OpenH323...

opal security update

CentOS Errata and Security Advisory CESA-2007:0957 Updated opal packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Open Phone Abstraction Library opal is...