MSN messenger IP地址泄露漏洞

CVECAN ID: CVE-2008-5828 MSN messenger是Windows操作系统默认捆绑的即时消息聊天客户端。 如果在NAT会话上使用了MSN协议版本15（MSNP15），Windows Live Messenger客户端允许远程攻击者通过读取Ipv4ExternalAddrsAndPorts、Ipv4InternalAddrsAndPorts头字段找到内部IP地址和端口号。...

Design/Logic Flaw

Microsoft Windows Live Messenger Client 8.5.1 and earlier, when MSN Protocol Version 15 MSNP15 is used over a NAT session, allows remote attackers to discover intranet IP addresses and port numbers by reading the 1 IPv4InternalAddrsAndPorts, 2 IPv4Internal-Addrs, and 3 IPv4Internal-Port header...

CVE-2008-5828

Microsoft Windows Live Messenger Client 8.5.1 and earlier, when MSN Protocol Version 15 MSNP15 is used over a NAT session, allows remote attackers to discover intranet IP addresses and port numbers by reading the 1 IPv4InternalAddrsAndPorts, 2 IPv4Internal-Addrs, and 3 IPv4Internal-Port header...

RHEL 4 / 5 : pidgin (RHSA-2008:1023)

The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2008:1023 advisory. - pidgin: remote DoS via MSN message with crafted file name CVE-2008-2955 - pidgin: unrestricted download of arbitrary files triggered v...

pidgin security and bug fix update

2.5.2-6 - Automatically detect booleans to enable build features from dist tag - Unify RHEL4 and RHEL5 spec with Fedora to make both easier to maintain 2.5.2-2 - Upstream backports: 100: sametime-redirect-null crash 101: NetworkManager-improvement 102: no-password-in-dialog-if-not-remembering 103...

MSN cross-site vulnerability analysis-vulnerability warning-the black bar safety net

As early as a few days ago, heard colleagues say,“friends msn send to a web page, enter the password, the results a few days later, the MSN password is wrong, could be stolen.” At that time also asked colleagues want the address, but he said address not found. A few days later a friend said to se...

merlixeducate-bypassdisclose.txt

Merlix Educate Servert Bypass/DD Multiple Remote Vuln ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : -----------------------------------------------------------...

USN-675-2: Gaim vulnerability

It was discovered that Gaim did not properly handle certain malformed messages in the MSN protocol handler. A remote attacker could send a specially crafted message and possibly execute arbitrary code with user privileges. CVE-2008-2927...

USN-675-1: Pidgin vulnerabilities

It was discovered that Pidgin did not properly handle certain malformed messages in the MSN protocol handler. A remote attacker could send a specially crafted message and possibly execute arbitrary code with user privileges. CVE-2008-2927 It was discovered that Pidgin did not properly handle file...

MSN Messenger PNG Image Buffer Overflow Download Shellcoded Exploit

No description provided by source. / MSN Messenger PNG Image Buffer Overflow Download Shellcoded Exploit Bug discoveried by Core Security Technologies www.coresecurity.com Exploit coded By ATmaCA Copyright ?2002-2005 AtmacaSoft Inc. All Rights Reserved. Web: http://www.atmacasoft.com E-Mail:...

hybook-disclose.txt

hyBook Remote Password Disclouse Vulnerability Ghost Hacker , Real Hack Back Author : Ghost Hacker My Home : www.Real-h.com Real Hack Back Contact Me : [email protected] Bug : Remote Password Disclouse From : Kingdom Saudi Arabia Name Script : hyBook Download :...

chilkat-overwrite.txt

Chilkat XML ActiveX File overwriting vulnerability PoCon msn.exe for fun Discovered by: shinnai PoC by: e.wiZz! In the wild... File: ChilkatUtil.dll 'Wscript.echo typenametarget targetFile = "C:\Program Files\Chilkat Software Inc\Chilkat XML ActiveX\ChilkatUtil.dll" prototype = "Function SaveToFi...

[SECURITY] Fedora 8 Update: bitlbee-1.2.2-1.fc8

Bitlbee is an IRC to other chat networks gateway. Bitlbee can be used as an IRC server which forwards everything you say to people on other chat networks like ICQ, MSN, Jabber or Yahoo!...

FreeBSD Ports: gaim, ja-gaim, ko-gaim, ru-gaim

The remote host is missing an update to the system as announced in the referenced advisory. VID 5b8f9a02-ec93-11d8-b913-000c41e2cdad OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: gaim, ja-gaim, ko-gaim, ru-gaim

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

ZDI-08-054: Multiple Vendor libpurple MSN Protocol SLP Message Heap Overflow Vulnerability

ZDI-08-054: Multiple Vendor libpurple MSN Protocol SLP Message Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-054 August 28, 2008 -- CVE ID: CVE-2008-2927 -- Affected Vendors: Adium Pidgin -- Affected Products: Adium Adiumx Pidgin Pidgin -- Vulnerability Details:...

Multiple Vendor libpurple MSN Protocol SLP Message Heap Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of messaging applications that make use of the libpurple library. User interaction is not required to exploit this vulnerability. The specific flaw exists in the implementation of the MSN...

Pidgin MSN SLP Message Integer Overflow Vulnerabilities - Windows

Pidgin is prone to an integer overflow vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Pidgin MSN SLP Message Integer Overflow Vulnerabilities - Linux

Pidgin is prone to an integer overflow vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:pidgin:pidgin"; ifdescripti...

The instance profile“cross-site intrusion” watch out for MSN account lost-vulnerability warning-the black bar safety net

Last time we introducedwhat is thecross-site attacksCross Site Scripting, today we look at a specific example, and describes how to avoid suffering cross-site attacks. “Cross-site intrusion”crime reduction: cross-site intrusion MSN hacking We according to users provide clues to his MSN account is...