Debian: Security Advisory (DSA-2038-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 2038-1 (pidgin)

The remote host is missing an update to pidgin announced via advisory DSA 2038-1. OpenVAS Vulnerability Test $Id: deb20381.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2038-1 pidgin Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Authentication flaw

Cerulean Studios Trillian 3.1 Basic does not check SSL certificates during MSN authentication, which allows remote attackers to obtain MSN credentials via a man-in-the-middle attack with a spoofed SSL certificate...

CVE-2009-4831

Cerulean Studios Trillian 3.1 Basic does not check SSL certificates during MSN authentication, which allows remote attackers to obtain MSN credentials via a man-in-the-middle attack with a spoofed SSL certificate...

[SECURITY] Fedora 13 Update: amsn-0.98.3-1.fc13

This is an MSN Messenger clone for Unix, Windows, and Macintosh. It is written in tcl/tk and supports filetransfers, webcam, etc...

CVE-2010-0744

aMSN aka Alvaro's Messenger 0.98.3 and earlier, when SSL is used, does not verify that the server hostname matches a domain name in the subject's Common Name CN field or a Subject Alternative Name field of the X.509 certificate, which allows man-in-the-middle attackers to spoof an MSN server via ...

CVE-2010-0744

aMSN aka Alvaro's Messenger 0.98.3 and earlier, when SSL is used, does not verify that the server hostname matches a domain name in the subject's Common Name CN field or a Subject Alternative Name field of the X.509 certificate, which allows man-in-the-middle attackers to spoof an MSN server via ...

Debian DSA-2038-1 : pidgin - several vulnerabilities

Several remote vulnerabilities have been discovered in Pidgin, a multi protocol instant messaging client. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-0420 Crafted nicknames in the XMPP protocol can crash Pidgin remotely. - CVE-2010-0423 Remote...

[SECURITY] [DSA 2038-1] New pidgin packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-2038-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst April 18, 2010 http://www.debian.org/security/faq -...

DSA-2038-1 pidgin - denial of service

Bulletin has no description...

openSUSE Security Update : finch (finch-2032)

This update of pidgin fixes various security vulnerabilities - CVE-2010-0013: CVSS v2 Base Score: 4.3: Path Traversal CWE-22 Remote file disclosure vulnerability by using the MSN protocol. - CVE-2010-0277: CVSS v2 Base Score: 4.9: Resource Management Errors CWE-399 MSN protocol plugin in libpurpl...

SuSE 11 Security Update : pidgin (SAT Patch Number 2019)

This update of pidgin fixes various security vulnerabilities : - Remote file disclosure vulnerability by using the MSN protocol. CVE-2010-0013: CVSS v2 Base Score: 4.3 : Path Traversal CWE-22 - MSN protocol plugin in libpurple allowed remote attackers to cause a denial of service memory corruptio...

Pidgin多个拒绝服务漏洞

BUGTRAQ ID: 38294 CVE ID: CVE-2010-0277,CVE-2010-0420,CVE-2010-0423 Pidgin是支持多种协议的即时通讯客户端。 Pidgin的MSN协议实现处理MSNSLP邀请的方式存在输入过滤漏洞，远程攻击者可以发送特制的INVITE请求导致拒绝服务（内存破坏和 Pidgin崩溃）。 Finch的XMPP聊天实现在使用多用户会话时存在拒绝服务漏洞。如果多用户聊天会话中的Finch用户要将昵称更改为包含有HTML br元素，就会导致Finch崩溃。...

MSN Editor vulnerability-vulnerability warning-the black bar safety net

This editor believe that we all run into, the background there is nodatadatabase backup, there's nothing you can directly Upload a webshell place, shabby to only one editor interface. ! Simple to say under the use of the method. Click on the image upload will appear after the upload page, the...

Debian DSA-1870-1 : pidgin - insufficient input validation

Federico Muttis discovered that libpurple, the shared library that adds support for various instant messaging networks to the pidgin IM client, is vulnerable to a heap-based buffer overflow. This issue exists because of an incomplete fix for CVE-2008-2927 and CVE-2009-1376. An attacker can exploi...

Ubuntu 8.04 LTS / 8.10 / 9.04 / 9.10 : pidgin vulnerabilities (USN-902-1)

Fabian Yamaguchi discovered that Pidgin incorrectly validated all fields of an incoming message in the MSN protocol handler. A remote attacker could send a specially crafted message and cause Pidgin to crash, leading to a denial of service. CVE-2010-0277 Sadrul Habib Chowdhury discovered that...

Mandriva Linux Security Advisory : pidgin (MDVSA-2010:041)

Multiple security vulnerabilities has been identified and fixed in pidgin : Certain malformed SLP messages can trigger a crash because the MSN protocol plugin fails to check that all pieces of the message are set correctly CVE-2010-0277. In a user in a multi-user chat room has a nickname containi...

Pidgin / Adium messenger multiple security vulnerabilities

Memory corruption on SLP MSN messages parsing. Multiple DoS conditions...

RedHat Update for pidgin RHSA-2010:0115-01

Check for the Version of pidgin OpenVAS Vulnerability Test RedHat Update for pidgin RHSA-2010:0115-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Moderate: Red Hat Security Advisory: pidgin security update

Updated pidgin packages that fix three security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program which can log in to multiple accounts on...