4 matches found
Debian DLA-413-1 : gajim security update
Affected versions of gajim allow remote attackers to modify the roster and intercept messages via a crafted roster-push IQ stanza. This has been fixed in squeeze-lts by version 0.13.4-3+squeeze4. NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA...
CVE-2015-8688
Gajim before 0.16.5 allows remote attackers to modify the roster and intercept messages via a crafted roster-push IQ stanza...
CVE-2015-8688: Improper Input Validation
Gajim before 0.16.5 allows remote attackers to modify the roster and intercept messages via a crafted roster-push IQ stanza...
PT-2016-3953
Name of the Vulnerable Software and Affected Versions Gajim versions prior to 0.16.5 Description The issue allows remote attackers to modify the roster and intercept messages via a crafted roster-push IQ stanza. Recommendations For versions prior to 0.16.5, update to version 0.16.5 or later to...