Debian: Security Advisory (DSA-734-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 716-1 (gaim)

The remote host is missing an update to gaim announced via advisory DSA 716-1. OpenVAS Vulnerability Test $Id: deb7161.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 716-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 734-1 (gaim)

The remote host is missing an update to gaim announced via advisory DSA 734-1. Two denial of service problems have been discovered in Gaim, a multi-protocol instant messaging client. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2005-1269 A malformed Yaho...

Debian Security Advisory DSA 434-1 (gaim)

The remote host is missing an update to gaim announced via advisory DSA 434-1. OpenVAS Vulnerability Test $Id: deb4341.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 434-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

CVE-2007-3841

PIDGIN 2.0.2 on Linux has an unspecified vulnerability (CVE-2007-3841) that could allow remote authenticated users listed in a users list to execute certain commands via unspecified vectors. The connected documents provide no concrete technical details, affected components, root cause, exploit st...

CentOS 3 / 4 : gaim (CESA-2005:518)

An updated gaim package that fixes two denial of service issues is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Gaim application is a multi-protocol instant messaging client. Jacopo Ottaviani discovered a bug in the way Ga...

CentOS 3 / 4 : gaim (CESA-2005:429)

An updated gaim package that fixes two security issues is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. The Gaim application is a multi-protocol instant messaging client. A stack based buffer overflow bug was found in the way...

CentOS 3 / 4 : gaim (CESA-2005:627)

An updated gaim package that fixes multiple security issues is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Gaim is an Internet Messaging client. A heap based buffer overflow issue was discovered in the way Gaim processes away...

CentOS 3 / 4 : gaim (CESA-2005:365)

An updated gaim package that fixes multiple denial of service issues is now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Gaim application is a multi-protocol instant messaging client. A buffer overflow bug was found in the wa...

FreeBSD : gaim -- AIM/ICQ non-UTF-8 filename crash (09db2844-0b21-11da-bc08-0001020eed82)

The GAIM team reports : A remote user could cause Gaim to crash on some systems by sending the Gaim user a file whose filename contains certain invalid characters. It is unknown what combination of systems are affected, but it is suspected that Windows users and systems with older versions of GTK...

FreeBSD : gaim -- AIM/ICQ away message buffer overflow (6d1761d2-0b23-11da-bc08-0001020eed82)

The GAIM team reports : A remote AIM or ICQ user can cause a buffer overflow in Gaim by setting an away message containing many AIM substitution strings such as %t or %n. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fro...

CVE-2005-4693

Gaim-Encryption 2.38-1 on Debian Linux is affected by a vulnerability that allows remote attackers to cause a denial of service (crash) via a crafted message from an ICQ buddy, potentially involving the GE_received_key function in keys.c. The description across sources consistently identifies the...

CVE-2005-4693

Gaim-Encryption 2.38-1 on Debian Linux allows remote attackers to cause a denial of service crash via a crafted message from an ICQ buddy, possibly involving the GEreceivedkey function in keys.c...

Ubuntu 4.10 / 5.04 : gaim vulnerability (USN-140-1)

A remote Denial of Service vulnerability was discovered in Gaim. A remote attacker could crash the Gaim client of an MSN user by sending a specially crafted MSN package which states an invalid body length in the header. Note that Tenable Network Security has extracted the preceding description...

Ubuntu 4.10 / 5.04 : gaim vulnerabilities (USN-125-1)

Marco Alvarez found a Denial of Service vulnerability in the Jabber protocol handler. A remote attacker could exploit this to crash Gaim by sending specially crafted file transfers to the user. CAN-2005-0967 Stu Tomlinson discovered an insufficient bounds checking flaw in the URL parser. By sendi...

Ubuntu 4.10 / 5.04 : gaim vulnerabilities (USN-168-1)

Daniel Atallah discovered a Denial of Service vulnerability in the file transfer handler of OSCAR the module that handles various instant messaging protocols like ICQ. A remote attacker could crash the Gaim client of an user by attempting to send him a file with a name that contains invalid UTF-8...

Ubuntu 4.10 : gaim vulnerabilities (USN-85-1)

The Gaim developers discovered that the HTML parser did not sufficiently validate its input. This allowed a remote attacker to crash the Gaim client by sending certain malformed HTML messages. CAN-2005-0208, CAN-2005-0473 Another lack of sufficient input validation was found in the 'Oscar' protoc...

Ubuntu 4.10 / 5.04 : gaim vulnerability (USN-139-1)

A remote Denial of Service vulnerability was discovered in Gaim. By initiating a file transfer with a file name containing certain international characters like an accented 'a', a remote attacker could crash the Gaim client of an arbitrary Yahoo IM member. Note that Tenable Network Security has...

Ubuntu 4.10 : gaim vulnerabilities (USN-106-1)

Jean-Yves Lefort discovered a buffer overflow in the gaimmarkupstriphtml function. This caused Gaim to crash when receiving certain malformed HTML messages. CAN-2005-0965 Jean-Yves Lefort also noticed that many functions that handle IRC commands do not escape received HTML metacharacters; this...

Ubuntu 4.10 : gaim vulnerabilities (USN-8-1)

A buffer overflow and two remote crashes were recently discovered in gaim's MSN protocol handler. An attacker could potentially execute arbitrary code with the user's privileges by crafting and sending a particular MSN message. Note that Tenable Network Security has extracted the preceding...