CVE-2012-5816

AOL Instant Messenger AIM 1.0.1.2 does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

CVE-2012-5816

Affected software: AOL Instant Messenger (AIM) 1.0.1.2. Vulnerability: AIM does not verify that the server hostname matches the CA/SubjectAltName in the X.509 certificate, enabling MITM with an arbitrary valid certificate. Impact as described: potential credential/local data exposure due to spoof...

LAN.FS Messenger v2.4 - Command Execution Vulnerability

Exploit for windows platform in category remote exploits LAN.FS Messenger v2.4 - Command Execution Vulnerability Introduction: ============= Lan.FS is a very quick, small and compact freeware networktool for non-commercial use only for Windows 2000/XP/2003/Vista & Windows 7. It is easy to handle...

Akeni LAN 1.2.118 Filter Bypass

A filter bypass vulnerability in Akeni LAN LE Messenger version 1.2.118 allows for malicious script insertion / cross site scripting attacks. Akeni LAN v1.2.118 - Filter Bypass Vulnerability Introduction: ============= Akeni LAN Messenger is an IM system designed for your LAN. It is easy to setup...

LAN Messenger 1.2.28 Cross Site Scripting

Title: ====== LAN Messenger v1.2.28 - Persistent Software Vulnerability Date: ===== 2012-05-16 References: =========== http://www.vulnerability-lab.com/getcontent.php?id= VL-ID: ===== 541 Common Vulnerability Scoring System: ==================================== 7.5 Introduction: ============= LAN...

Fedora Update for amsn FEDORA-2012-12151

Check for the Version of amsn OpenVAS Vulnerability Test Fedora Update for amsn FEDORA-2012-12151 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

[SECURITY] Fedora 17 Update: amsn-0.98.9-4.fc17

This is an MSN Messenger clone for Unix, Windows, and Macintosh. It is written in tcl/tk and supports filetransfers, webcam, etc...

Mibew Web Messenger 1.6.4 SQL Injection

!/usr/bin/python Author: Ucha Gobejishvili Timeline: 2012-08-05 Bug Discovered 2012-08-05 Public Disclosured Vendor: Mibew Web Messenger http://mibew.org/ Version: Mibew Messenger 1.6.4 Demo: http://demo.mibew.org Introduction: Mibew Messenger also known as Open Web Messenger is an open-source li...

Mibew Messenger 1.6.4 - threadid SQL Injection

Mibew Messenger 1.6.4 - threadid SQL Injection source: https://www.securityfocus.com/bid/54857/info Mibew Messenger is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker t...

Mibew Messenger 1.6.4 - 'threadid' SQL Injection

source: https://www.securityfocus.com/bid/54857/info Mibew Messenger is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access or modify...

Scientific Linux Security Update : pidgin on SL4.x, SL5.x i386/x86_64

A denial of service flaw was found in the Pidgin OSCAR protocol implementation. If a remote ICQ user sent a web message to a local Pidgin user using this protocol, it would cause excessive memory usage, leading to a denial of service Pidgin crash. CVE-2009-1889 These updated packages also fix the...

Scientific Linux Security Update : pidgin on SL4.x, SL5.x i386/x86_64

Multiple NULL pointer dereference flaws were found in the way Pidgin handled Base64 decoding. A remote attacker could use these flaws to crash Pidgin if the target Pidgin user was using the Yahoo! Messenger Protocol, MSN, MySpace, or Extensible Messaging and Presence Protocol XMPP protocol...

pidgin: Improper validation of incoming plaintext messages in MSN protocol plug-in

msg.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.4 does not properly handle crafted characters, which allows remote servers to cause a denial of service application crash by placing these characters in a text/plain message...

CVE-2012-3845

Buffer overflow in LAN Messenger 1.2.28 and earlier allows remote attackers to cause a denial of service crash via a long string in an initiation request...

Buffer overflow

Buffer overflow in LAN Messenger 1.2.28 and earlier allows remote attackers to cause a denial of service crash via a long string in an initiation request...

CVE-2012-3845

CVE-2012-3845 concerns LAN Messenger, affected in versions 1.2.28 and earlier. The vulnerability is a buffer overflow in the initiation request that can be triggered remotely, causing a denial of service (crash). Public references in the initial records list exploit resources, but the connected d...

CVE-2012-3845

Buffer overflow in LAN Messenger 1.2.28 and earlier allows remote attackers to cause a denial of service crash via a long string in an initiation request...

Novell GroupWise Messenger <= 2.1.0 DoS

Exploit for windows platform in category dos / poc winerr.h / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid char error; switchWSAGetLastError case 10004: error = "Interrupted system call"...

Pidgin: Multiple vulnerabilities

Background Pidgin is an GTK Instant Messenger client. Description Multiple vulnerabilities have been discovered in Pidgin. Please review the CVE identifiers referenced below for details. Impact These vulnerabilities allow for arbitrary file retrieval, Denial of Service and arbitrary code executio...

RedHat Update for pidgin RHSA-2011:0616-01

Check for the Version of pidgin OpenVAS Vulnerability Test RedHat Update for pidgin RHSA-2011:0616-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...