pidgin security and bug fix update

2.5.2-6 - Automatically detect booleans to enable build features from dist tag - Unify RHEL4 and RHEL5 spec with Fedora to make both easier to maintain 2.5.2-2 - Upstream backports: 100: sametime-redirect-null crash 101: NetworkManager-improvement 102: no-password-in-dialog-if-not-remembering 103...

USN-675-1: Pidgin vulnerabilities

It was discovered that Pidgin did not properly handle certain malformed messages in the MSN protocol handler. A remote attacker could send a specially crafted message and possibly execute arbitrary code with user privileges. CVE-2008-2927 It was discovered that Pidgin did not properly handle file...

[slackware-security] gnutls

New gnutls packages are available for Slackware 12.0, 12.1, and -current to fix a security issue. NOTE: The package for 12.0 has a different shared library soname, and the packages for 12.1 and -current have an API/ABI change. Only the Pidgin package in Slackware links with GnuTLS, and upgraded...

[Backports-security-announce] Security Update for pidgin

Gerfried Fuchs uploaded new packages for pidgin which fixed the following security problem: CVE-2008-2957, Debian Bug 488632 The UPnP functionality in Pidgin 2.0.0, and possibly other versions, allows remote attackers to trigger the download of arbitrary files and cause a denial of service memory...

[Backports-security-announce] Security Update for pidgin

Gerfried Fuchs uploaded new packages for pidgin which fixed the following security problem: CVE-2008-2957, Debian Bug 488632 The UPnP functionality in Pidgin 2.0.0, and possibly other versions, allows remote attackers to trigger the download of arbitrary files and cause a denial of service memory...

Pidgin Detection (Windows)

Pidgin, an open source, multi-protocol instant messaging client, is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid34205; scriptversion"1.17"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06"; scriptxrefname:"IAVT...

ZDI-08-054: Multiple Vendor libpurple MSN Protocol SLP Message Heap Overflow Vulnerability

ZDI-08-054: Multiple Vendor libpurple MSN Protocol SLP Message Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-054 August 28, 2008 -- CVE ID: CVE-2008-2927 -- Affected Vendors: Adium Pidgin -- Affected Products: Adium Adiumx Pidgin Pidgin -- Vulnerability Details:...

Pidgin NSS plugin SSL Certificate Validation Security Bypass Vulnerability - Windows

Pidgin is prone to a security bypass vulnerability SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:pidgin:pidgin"; ifdescription...

Pidgin MSN SLP Message Integer Overflow Vulnerabilities - Linux

Pidgin is prone to an integer overflow vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:pidgin:pidgin"; ifdescripti...

Pidgin MSN SLP Message Integer Overflow Vulnerabilities (Linux)

The host is running Pidgin, which is prone to integer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodpidginintgroverflowlin900009.nasl 7823 2017-11-20 08:54:04Z cfischer $ Description: Pidgin MSN SLP Message Integer Overflow Vulnerabilities Linux Authors: Chandan S Copyright:...

Pidgin NSS plugin SSL Certificate Validation Security Bypass Vulnerability (Windows)

The host is running Pidgin, which is prone to Security Bypass Vulnerability OpenVAS Vulnerability Test $Id: secpodpidginsslsecbypassvulnwin900020.nasl 5370 2017-02-20 15:24:26Z cfi $ Description: Pidgin NSS plugin SSL Certificate Validation Security Bypass Vulnerability Windows Authors: Sharath S...

Pidgin MSN SLP Message Integer Overflow Vulnerabilities - Windows

Pidgin is prone to an integer overflow vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Pidgin MSN SLP Message Integer Overflow Vulnerabilities (Windows)

The host is running Pidgin, which is prone to integer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodpidginintgroverflowwin900008.nasl 5370 2017-02-20 15:24:26Z cfi $ Description: Pidgin MSN SLP Message Integer Overflow Vulnerabilities Windows Authors: Chandan S Copyright: Copyrigh...

Pidgin NSS plugin SSL Certificate Validation Security Bypass Vulnerability (Linux)

The host is running Pidgin, which is prone to Security Bypass Vulnerability OpenVAS Vulnerability Test $Id: secpodpidginsslsecbypassvulnlin900022.nasl 7823 2017-11-20 08:54:04Z cfischer $ Description: Pidgin NSS plugin SSL Certificate Validation Security Bypass Vulnerability Linux Authors: Chanda...

Pidgin NSS plugin SSL Certificate Validation Security Bypass Vulnerability - Linux

Pidgin is prone to a security bypass vulnerability SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:pidgin:pidgin"; ifdescription...

Code injection

The NSS plugin in libpurple in Pidgin 2.4.3 does not verify SSL certificates, which makes it easier for remote attackers to trick a user into accepting an invalid server certificate for a spoofed service...

CVE-2008-3532

The NSS plugin in libpurple in Pidgin 2.4.3 does not verify SSL certificates, which makes it easier for remote attackers to trick a user into accepting an invalid server certificate for a spoofed service...

DEBIAN-CVE-2008-3532

The NSS plugin in libpurple in Pidgin 2.4.3 does not verify SSL certificates, which makes it easier for remote attackers to trick a user into accepting an invalid server certificate for a spoofed service...

CVE-2008-3532

The NSS plugin in libpurple in Pidgin 2.4.3 does not verify SSL certificates, which makes it easier for remote attackers to trick a user into accepting an invalid server certificate for a spoofed service...

CVE-2008-3532

The NSS plugin in libpurple in Pidgin 2.4.3 does not verify SSL certificates, which makes it easier for remote attackers to trick a user into accepting an invalid server certificate for a spoofed service...