multiple remote denial of service vulnerabilities in Gaim

I. Synopsis Gaim http://gaim.sourceforge.net is a multi-protocol instant messaging client. I have identified several remote denial of service vulnerabilities affecting Gaim 1.2.0, and probably older versions as well. II. Problems 1. Buffer overread in gaimmarkupstriphtml A programming error in...

Gaim vulnerable to HTML processing denial of service

Overview Gaim contains a flaw in HTML processing that may result in an invalid memory access and denial of service condition. Description From the Gaim project:Gaim is a multi-protocol instant messaging IM client for Linux, BSD, MacOS X, and Windows. It is compatible with AIM and ICQ Oscar...

GLSA-200401-04 : GAIM 0.75 Remote overflows

The remote host is affected by the vulnerability described in GLSA-200401-04 GAIM 0.75 Remote overflows Yahoo changed the authentication methods to their IM servers, rendering GAIM useless. The GAIM team released a rushed release solving this issue, however, at the same time a code audit revealed...

Gaim: New vulnerabilities

Background Gaim is a multi-protocol instant messaging client for Linux which supports many instant messaging protocols. Description Gaim fails to do proper bounds checking when: Handling MSN messages partially fixed with GLSA 200408-12. Handling rich text format messages. Resolving local hostname...

Gadu-Gadu 6.0 - File Download Filename Obfuscation

source: https://www.securityfocus.com/bid/11017/info Gadu-Gadu is a Polish instant messaging application for Microsoft Windows operating systems. It is reported that the Gadu-Gadu instant messenger application contains a weakness allowing attackers to obfuscate file extensions. This may allow an...

Gadu-Gadu 6.0 - File Download Filename Obfuscation

Gadu-Gadu 6.0 - File Download Filename Obfuscation source: https://www.securityfocus.com/bid/11017/info Gadu-Gadu is a Polish instant messaging application for Microsoft Windows operating systems. It is reported that the Gadu-Gadu instant messenger application contains a weakness allowing attacke...

RHEL 2.1 : gaim (RHSA-2002:191)

Updated gaim packages are now available for Red Hat Linux Advanced Server. These updates fix a vulnerability in the default URL handler. Gaim is an all-in-one instant messaging client that lets you use a number of messaging protocols such as AIM, ICQ, and Yahoo, all at once. Versions of gaim prio...

Advisory 02/2004: Trillian remote overflows

e-matters GmbH www.e-matters.de -= Security Advisory =- Advisory: Trillian remote overflows Release Date: 2004/02/24 Last Modified: 2004/02/24 Author: Stefan Esser [email protected] Application: Trillian 0.71-0.74 w/ patch f Trillian Pro 1.0, 2.0, 2.01 Severity: 2 vulnerabilities were found in...

DSA-434 gaim - several vulnerabilities

Bulletin has no description...

Advisory 01/2004: 12 x Gaim remote overflows

e-matters GmbH www.e-matters.de -= Security Advisory =- Advisory: 12 x Gaim remote overflows Release Date: 2004/01/26 Last Modified: 2004/01/26 Author: Stefan Esser [email protected] Application: Gaim = 0.75 Severity: 12 vulnerabilities were found in the instant messenger GAIM that allow remot...

GAIM 0.75 Remote overflows

Background Gaim is a multi-platform and multi-protocol instant messaging client. It is compatible with AIM , ICQ, MSN Messenger, Yahoo, IRC, Jabber, Gadu-Gadu, and the Zephyr networks. Description Yahoo changed the authentication methods to their IM servers, rendering GAIM useless. The GAIM team...

Yahoo Messenger Detection

Yahoo Messenger is running on this machine and listening on this port. It allows a user to chat and share files with remote entities. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11993; scriptversion"$Revision: 1.12 $"; scriptcvsdate"$Date: 2012/02/17 13:05:00 $";...

Gast Arbeiter Privilege Escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - ------------------------------------------------------------ NATOK security labs natok at hush.com October 20st, 2003 Privilege Escalation - - - ------------------------------------------------------------ - - - Overview Software : Gast Arbeiter...

AOL Instant Messenger (AIM) Software Detection (credentialed check)

The remote host is running AOL Instant Messenger AIM. AIM is a commonly used chat client. This script was written by Jeff Adams Changes made by Tenable - Updated description - Added Synopsis/Solution/See also - Revise title 10/9/09 - Title touch-up 10/28/09 - Added CPE 08/13/12 include"compat.inc...

EveryBuddy 0.4.3 - Long Message Denial of Service

source: https://www.securityfocus.com/bid/8343/info EveryBuddy is prone to a denial of service vulnerability when handling instant messages of excessive length. This could be exploited with a malicious instant messaging client. This condition may be due to a buffer overflow, though this has not...

Important: Red Hat Security Advisory: : : : Updated gaim client fixes vulnerabilities

Updated gaim packages that fix a number of vulnerabilities are now available for Red Hat Linux on IBM iSeries and pSeries systems. Gaim is an all-in-one instant messaging client that lets you use a number of messaging protocols such as AIM, ICQ, and Yahoo, all at once. Versions of gaim prior to...

Trillian Detection

Trillian is installed on the remote Windows host. Trillian is an instant messaging client for Windows. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11428; scriptversion"1.20"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06";...

Microsoft Windows Messenger Detection

Windows Messenger, an instant messaging client, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11429; scriptversion"1.17"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/02/01"; scriptnameenglish:"Microsoft...

Yahoo! Messenger Detection

Yahoo! Messenger, an instant-messaging application, is installed on the Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11432; scriptversion"1.27"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06"; scriptnameenglish:"Yahoo!...

ICQ Detection

ICQ is installed on the remote host. ICQ is an instant messaging client for Windows that also includes some peer-to-peer file sharing features. As such, it may not be suitable for use in a business environment. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11425;...