178 matches found
Slackware 10.0 / 10.1 / current : kdenetwork (SSA:2005-203-02)
New kdenetwork packages are available for Slackware 10.0, 10.1, and -current to fix security issues. Overflows in libgadu used by kopete that can cause a denial of service or arbitrary code execution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...
Debian DSA-813-1 : centericq - several vulnerabilities
Several problems have been discovered in libgadu which is also part of centericq, a text-mode multi-protocol instant messenger client. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-2369 Multiple integer signedness errors may allow remote attackers...
DSA-813-1 centericq - several
Bulletin has no description...
[Full-disclosure] [SECURITY] [DSA 813-1] New centericq packages fix several vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 813-1 [email protected] http://www.debian.org/security/ Martin Schulze September 15th, 2005 http://www.debian.org/security/faq -...
CVE-2005-2448
CVE-2005-2448 : Endianness errors in libgadu used by ekg (centericq) allow remote denial of service on big‑endian systems. Public records tie this to Debian advisories DSA-813-1 and DSA-1318‑1, which describe fixes in the ekg package. Exploit details are not provided in the sources. Remediation: ...
CVE-2005-2448
Multiple "endianness errors" in libgadu in ekg before 1.6rc2 allow remote attackers to cause a denial of service invalid behavior in applications on big-endian systems...
CVE-2005-2448
Removed by vendor...
CVE-2005-2448
Multiple "endianness errors" in libgadu in ekg before 1.6rc2 allow remote attackers to cause a denial of service invalid behavior in applications on big-endian systems...
CVE-2005-2448
Multiple "endianness errors" in libgadu in ekg before 1.6rc2 allow remote attackers to cause a denial of service invalid behavior in applications on big-endian systems...
Debian DSA-767-1 : ekg - integer overflows
Marcin Slusarz discovered two integer overflow vulnerabilities in libgadu, a library provided and used by ekg, a console Gadu Gadu client, an instant messaging program, that could lead to the execution of arbitrary code. The library is also used by other packages such as kopete, which should be...
GLSA-200507-26 : GNU Gadu, CenterICQ, Kadu, EKG, libgadu: Remote code execution in Gadu library
The remote host is affected by the vulnerability described in GLSA-200507-26 GNU Gadu, CenterICQ, Kadu, EKG, libgadu: Remote code execution in Gadu library GNU Gadu, CenterICQ, Kadu, EKG and libgadu are vulnerable to an integer overflow. Impact : A remote attacker could exploit the integer overfl...
DSA-769-1 gaim - memory alignment bug
Bulletin has no description...
[SECURITY] [DSA 767-1] New ekg packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 767-1 [email protected] http://www.debian.org/security/ Martin Schulze July 27th, 2005 http://www.debian.org/security/faq -...
DSA-767-1 ekg - integer overflows
Bulletin has no description...
ekg Gadu Gadu client / libgadu multiple vulnerabilities
Symbolic links problem on temporary files creation. Unfiltered shell characters. Libgadu integer overflow. Multiple platform-specific problems...
[ GLSA 200507-26 ] GNU Gadu, CenterICQ, Kadu, EKG, libgadu: Remote code execution in Gadu library
Gentoo Linux Security Advisory GLSA 200507-26 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
CVE-2005-2370
Multiple "memory alignment errors" in libgadu, as used in ekg before 1.6rc2, Gaim before 1.5.0, and other packages, allows remote attackers to cause a denial of service bus error on certain architectures such as SPARC via an incoming message...
CVE-2005-2369
Multiple integer signedness errors in libgadu, as used in ekg before 1.6rc2 and other packages, may allow remote attackers to cause a denial of service or execute arbitrary code...