Slackware 10.0 / 10.1 / current : kdenetwork (SSA:2005-203-02)

New kdenetwork packages are available for Slackware 10.0, 10.1, and -current to fix security issues. Overflows in libgadu used by kopete that can cause a denial of service or arbitrary code execution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

Debian DSA-813-1 : centericq - several vulnerabilities

Several problems have been discovered in libgadu which is also part of centericq, a text-mode multi-protocol instant messenger client. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-2369 Multiple integer signedness errors may allow remote attackers...

[Full-disclosure] [SECURITY] [DSA 813-1] New centericq packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 813-1 [email protected] http://www.debian.org/security/ Martin Schulze September 15th, 2005 http://www.debian.org/security/faq -...

DSA-813-1 centericq - several

Bulletin has no description...

CVE-2005-2448

Multiple "endianness errors" in libgadu in ekg before 1.6rc2 allow remote attackers to cause a denial of service invalid behavior in applications on big-endian systems...

CVE-2005-2448

Multiple "endianness errors" in libgadu in ekg before 1.6rc2 allow remote attackers to cause a denial of service invalid behavior in applications on big-endian systems...

CVE-2005-2448

CVE-2005-2448 : Endianness errors in libgadu used by ekg (centericq) allow remote denial of service on big‑endian systems. Public records tie this to Debian advisories DSA-813-1 and DSA-1318‑1, which describe fixes in the ekg package. Exploit details are not provided in the sources. Remediation: ...

CVE-2005-2448

Multiple "endianness errors" in libgadu in ekg before 1.6rc2 allow remote attackers to cause a denial of service invalid behavior in applications on big-endian systems...

CVE-2005-2448

Removed by vendor...

Debian DSA-767-1 : ekg - integer overflows

Marcin Slusarz discovered two integer overflow vulnerabilities in libgadu, a library provided and used by ekg, a console Gadu Gadu client, an instant messaging program, that could lead to the execution of arbitrary code. The library is also used by other packages such as kopete, which should be...

GLSA-200507-26 : GNU Gadu, CenterICQ, Kadu, EKG, libgadu: Remote code execution in Gadu library

The remote host is affected by the vulnerability described in GLSA-200507-26 GNU Gadu, CenterICQ, Kadu, EKG, libgadu: Remote code execution in Gadu library GNU Gadu, CenterICQ, Kadu, EKG and libgadu are vulnerable to an integer overflow. Impact : A remote attacker could exploit the integer overfl...

DSA-769-1 gaim - memory alignment bug

Bulletin has no description...

[SECURITY] [DSA 767-1] New ekg packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 767-1 [email protected] http://www.debian.org/security/ Martin Schulze July 27th, 2005 http://www.debian.org/security/faq -...

DSA-767-1 ekg - integer overflows

Bulletin has no description...

[ GLSA 200507-26 ] GNU Gadu, CenterICQ, Kadu, EKG, libgadu: Remote code execution in Gadu library

Gentoo Linux Security Advisory GLSA 200507-26 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

ekg Gadu Gadu client / libgadu multiple vulnerabilities

Symbolic links problem on temporary files creation. Unfiltered shell characters. Libgadu integer overflow. Multiple platform-specific problems...

CVE-2005-1852

Multiple integer overflows in libgadu, as used in Kopete in KDE 3.2.3 to 3.4.1, ekg before 1.6rc3, GNU Gadu, CenterICQ, Kadu, and other packages, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an incoming message...

CVE-2005-2369

Multiple integer signedness errors in libgadu, as used in ekg before 1.6rc2 and other packages, may allow remote attackers to cause a denial of service or execute arbitrary code...

CVE-2005-1852

Multiple integer overflows in libgadu, as used in Kopete in KDE 3.2.3 to 3.4.1, ekg before 1.6rc3, GNU Gadu, CenterICQ, Kadu, and other packages, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an incoming message...

CVE-2005-1852

Multiple integer overflows in libgadu, as used in Kopete in KDE 3.2.3 to 3.4.1, ekg before 1.6rc3, GNU Gadu, CenterICQ, Kadu, and other packages, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an incoming message...