CVE-2010-3711

libpurple in Pidgin before 2.7.4 does not properly validate the return value of the purplebase64decode function, which allows remote authenticated users to cause a denial of service NULL pointer dereference and application crash via a crafted message, related to the plugins for MSN, MySpaceIM,...

Null pointer dereference

libpurple in Pidgin before 2.7.4 does not properly validate the return value of the purplebase64decode function, which allows remote authenticated users to cause a denial of service NULL pointer dereference and application crash via a crafted message, related to the plugins for MSN, MySpaceIM,...

CVE-2010-3711

libpurple in Pidgin before 2.7.4 does not properly validate the return value of the purplebase64decode function, which allows remote authenticated users to cause a denial of service NULL pointer dereference and application crash via a crafted message, related to the plugins for MSN, MySpaceIM,...

CVE-2010-3711

libpurple in Pidgin before 2.7.4 does not properly validate the return value of the purplebase64decode function, which allows remote authenticated users to cause a denial of service NULL pointer dereference and application crash via a crafted message, related to the plugins for MSN, MySpaceIM,...

Mandriva Linux Security Advisory : pidgin (MDVSA-2010:208)

A security vulnerability has been identified and fixed in pidgin : It has been discovered that eight denial of service conditions exist in libpurple all due to insufficient validation of the return value from purplebase64decode. Invalid or malformed data received in place of a valid base64-encode...

Microsoft Windows SMB Server NTLM Multiple Vulnerabilities (971468)

This host is missing a critical security update according to Microsoft Bulletin MS10-012. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Windows NTLM Weak Nonce Vulnerability

Exploit for windows platform in category remote exploits ===================================== Windows NTLM Weak Nonce Vulnerability ===================================== Title: Windows SMB NTLM Authentication Weak Nonce Vulnerability Advisory ID: OCHOA-2010-0209 Advisory URL:...

Microsoft Windows - NTLM Weak Nonce (MS10-012)

Windows SMB NTLM Authentication Weak Nonce Vulnerability Security Advisory Hernan Ochoa [email protected] - Agustin Azubel [email protected] Title: Windows SMB NTLM Authentication Weak Nonce Vulnerability Advisory ID: OCHOA-2010-0209 Advisory URL:...

Microsoft Windows - NTLM Weak Nonce (MS10-012)

Microsoft Windows - NTLM Weak Nonce MS10-012 Windows SMB NTLM Authentication Weak Nonce Vulnerability Security Advisory Hernan Ochoa [email protected] - Agustin Azubel [email protected] Title: Windows SMB NTLM Authentication Weak Nonce Vulnerability Advisory ID: OCHOA-2010-0209...

SuSE 10 Security Update : XULRunner (ZYPP Patch Number 6734)

The Mozilla XULRunner engine was updated to version 1.9.0.16, fixing lots of bugs and various security issues. The following issues were fixed : - Crashes with evidence of memory corruption 1.9.0.16. MFSA 2009-65 / CVE-2009-3979 / CVE-2009-3981 - bmo487872 NTLM reflection vulnerability. MFSA...

SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 6735)

The Mozilla Firefox was updated to version 3.5.6, fixing lots of bugs and various security issues. The following issues were fixed : - Crashes with evidence of memory corruption rv:1.9.1.6. MFSA 2009-65 / CVE-2009-3979 / CVE-2009-3980 / CVE-2009-3982 - bmo504843,bmo523816 Memory safety fixes in...

SuSE9 Security Update : Samba (YOU Patch Number 12644)

A buffer overflow in the sidparse function of samba could potentially be exploited by remote attackers to execute arbitrary code. CVE-2010-3069 Additionally the update also contains fixes for the following non-security issues : - bnc567013 - Failed to join ADS Domain - bnc592198 - Samba 3.0 / 3.2...

openSUSE Security Update : cifs-mount (openSUSE-SU-2010:0658-1)

A buffer overflow in the sidparse function of samba could potentially be exploited by remote attackers to execute arbitrary code CVE-2010-3069. Additionally the update also contains fixes for the following non-security issues: bnc567013 - Failed to join ADS Domain bnc592198 - Samba 3.0 / 3.2...

MailEnable SMTP NTLM Authentication Buffer Overflow

A buffer overflow vulnerability exists in MailEnable server products. The flaw is caused by insufficient validation checks when processing the signature field of NTLM Type1 messages within the SMTP service. A remote unauthenticated attacker may successfully exploit this vulnerability to execute...

NTLM Authentication Is Still A Security Risk

A 15-year-old vulnerability in technology used to authenticate users on Windows and Unix networks continues to put the organizations that rely on it at risk, said a researcher. Read the full article. The Register...

MDVA-2010:172 : libneon0.27

This update fixes a reported buffer overflow found with ntlm authentication MDV 59779. Update: This advisory is obsoleted by http://www.mandriva.com/en/security/advisories?name=MDVSA-2010:123 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently...

Mandriva Linux Security Advisory : libneon0.27 (MDVSA-2010:123)

This update fixes a reported buffer overflow found with ntlm authentication MDV 59779. This advisory obsoletes MDVA-2010:172 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Mandriva Linux Security Advisory...

Mandriva Update for libneon0.27 MDVSA-2010:123 (libneon0.27)

Check for the Version of libneon0.27 OpenVAS Vulnerability Test Mandriva Update for libneon0.27 MDVSA-2010:123 libneon0.27 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

libneon library / svn buffer overflow

Buffer overflow in NTLM authorization implementation...

Mandriva Update for libneon0.27 MDVA-2010:172 (libneon0.27)

Check for the Version of libneon0.27 OpenVAS Vulnerability Test Mandriva Update for libneon0.27 MDVA-2010:172 libneon0.27 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...