Advisory 01/2004: 12 x Gaim remote overflows

e-matters GmbH www.e-matters.de -= Security Advisory =- Advisory: 12 x Gaim remote overflows Release Date: 2004/01/26 Last Modified: 2004/01/26 Author: Stefan Esser [email protected] Application: Gaim = 0.75 Severity: 12 vulnerabilities were found in the instant messenger GAIM that allow remot...

CVE-2004-0043

Buffer overflow in Yahoo Instant Messenger 5.6.0.1351 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long filename in the download feature...

CVE-2004-0043

CVE-2004-0043 relates to a buffer overflow in Yahoo Messenger before and including version 5.6.0.1351, triggered by a long filename in the download feature. The vulnerability can cause a denial of service and, potentially, remote code execution. Affected software is Yahoo Instant Messenger, with ...

CVE-2004-0043: Undefined Security Weakness

Buffer overflow in Yahoo Instant Messenger 5.6.0.1351 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long filename in the download feature...

Yahoo Messenger Detection

Yahoo Messenger is running on this machine and listening on this port. It allows a user to chat and share files with remote entities. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11993; scriptversion"$Revision: 1.12 $"; scriptcvsdate"$Date: 2012/02/17 13:05:00 $";...

Yahoo Instant Messenger buffer overflow

Buffer overflow on oversized filename...

Yahoo Instant Messenger Long Filename Downloading Buffer Overflow

Yahoo Instant Messenger Long Filename Downloading Buffer Overflow ================================================= PROGRAM: Yahoo Instant Messenger YIM HOMEPAGE: http://messenger.yahoo.com VULNERABLE VERSIONS: 5.6.0.1351 and below DESCRIPTION ================================================= YIM...

CVE-2003-1503

Buffer overflow in AOL Instant Messenger AIM 5.2.3292 allows remote attackers to execute arbitrary code via an aim:getfile URL with a long screen name...

PT-2003-2448 · Aol · Aol Instant Messenger

Name of the Vulnerable Software and Affected Versions: AOL Instant Messenger AIM version 5.2.3292 Description: The issue allows remote attackers to execute arbitrary code via an aim:getfile URL with a long screen name. This is a result of a buffer overflow. Recommendations: For AOL Instant...

Gast Arbeiter Privilege Escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - ------------------------------------------------------------ NATOK security labs natok at hush.com October 20st, 2003 Privilege Escalation - - - ------------------------------------------------------------ - - - Overview Software : Gast Arbeiter...

Buffer Overflow in AOL Instant Messager

DigitalPranksters Security Advisory http://www.DigitalPranksters.com AIM POP POP - Buffer Overflow in AOL Instant Messager's screenname parameter of getfile Risk: Medium Product: AIM 5.2.3292 for Windows Maybe others we only tested the latest version Product URL: http://www.aim.com Vendor...

AOL Instant Messanger buffer overflow

Buffer overflow in screenname parameter during aim: URL parsing...

AOL Instant Messenger (AIM) Software Detection (credentialed check)

The remote host is running AOL Instant Messenger AIM. AIM is a commonly used chat client. This script was written by Jeff Adams Changes made by Tenable - Updated description - Added Synopsis/Solution/See also - Revise title 10/9/09 - Title touch-up 10/28/09 - Added CPE 08/13/12 include"compat.inc...

EveryBuddy 0.4.3 - Long Message Denial of Service

EveryBuddy 0.4.3 - Long Message Denial of Service source: https://www.securityfocus.com/bid/8343/info EveryBuddy is prone to a denial of service vulnerability when handling instant messages of excessive length. This could be exploited with a malicious instant messaging client. This condition may ...

EveryBuddy 0.4.3 - Long Message Denial of Service

source: https://www.securityfocus.com/bid/8343/info EveryBuddy is prone to a denial of service vulnerability when handling instant messages of excessive length. This could be exploited with a malicious instant messaging client. This condition may be due to a buffer overflow, though this has not...

Important: Red Hat Security Advisory: : : : Updated gaim client fixes vulnerabilities

Updated gaim packages that fix a number of vulnerabilities are now available for Red Hat Linux on IBM iSeries and pSeries systems. Gaim is an all-in-one instant messaging client that lets you use a number of messaging protocols such as AIM, ICQ, and Yahoo, all at once. Versions of gaim prior to...

CVE-2003-0217

Cross-site scripting XSS vulnerability in Neoteris Instant Virtual Extranet IVE 3.01 and earlier allows remote attackers to insert arbitrary web script and bypass authentication via a certain CGI script...

ttCMS 2.22.3 ttForum 1.1 - index.php Instant-Messages Preferences SQL Injection

ttCMS 2.22.3 ttForum 1.1 - index.php Instant-Messages Preferences SQL Injection source: https://www.securityfocus.com/bid/7634/info A problem with ttCMS/ttForum could make it possible for a remote user to launch SQL injection attacks. It has been reported that a problem exists in the...

ttCMS 2.2/2.3 / ttForum 1.1 - 'index.php' Instant-Messages Preferences SQL Injection

source: https://www.securityfocus.com/bid/7634/info A problem with ttCMS/ttForum could make it possible for a remote user to launch SQL injection attacks. It has been reported that a problem exists in the Instant-Messages script distributed as part of the software. Due to insufficient sanitizing ...

CVE-2003-0217

Cross-site scripting XSS vulnerability in Neoteris Instant Virtual Extranet IVE 3.01 and earlier allows remote attackers to insert arbitrary web script and bypass authentication via a certain CGI script...