Lucene search
+L

305 matches found

NVD
NVD
added 2009/05/26 3:30 p.m.22 views

CVE-2009-1373

Buffer overflow in the XMPP SOCKS5 bytestream server in Pidgin formerly Gaim before 2.5.6 allows remote authenticated users to execute arbitrary code via vectors involving an outbound XMPP file transfer. NOTE: some of these details are obtained from third party information...

7.1CVSS7.2AI score0.04272EPSS
Exploits1References25
UbuntuCve
UbuntuCve
added 2009/05/26 3:30 p.m.29 views

CVE-2009-1373

Buffer overflow in the XMPP SOCKS5 bytestream server in Pidgin formerly Gaim before 2.5.6 allows remote authenticated users to execute arbitrary code via vectors involving an outbound XMPP file transfer. NOTE: some of these details are obtained from third party information...

7.1CVSS6AI score0.04272EPSS
Exploits1References3
Prion
Prion
added 2009/05/26 3:30 p.m.18 views

Buffer overflow

Buffer overflow in the XMPP SOCKS5 bytestream server in Pidgin formerly Gaim before 2.5.6 allows remote authenticated users to execute arbitrary code via vectors involving an outbound XMPP file transfer. NOTE: some of these details are obtained from third party information...

7.1CVSS7.9AI score0.04272EPSS
Exploits1References25Affected Software1
Cvelist
Cvelist
added 2009/05/26 3:16 p.m.24 views

CVE-2009-1373

Buffer overflow in the XMPP SOCKS5 bytestream server in Pidgin formerly Gaim before 2.5.6 allows remote authenticated users to execute arbitrary code via vectors involving an outbound XMPP file transfer. NOTE: some of these details are obtained from third party information...

7.7AI score0.04272EPSS
Exploits1References25
Debian CVE
Debian CVE
added 2009/05/26 3:16 p.m.35 views

CVE-2009-1373

Buffer overflow in the XMPP SOCKS5 bytestream server in Pidgin formerly Gaim before 2.5.6 allows remote authenticated users to execute arbitrary code via vectors involving an outbound XMPP file transfer. NOTE: some of these details are obtained from third party information...

7.1CVSS7.3AI score0.04272EPSS
Exploits1
CVE
CVE
added 2009/05/26 3:16 p.m.167 views

CVE-2009-1373

CVE-2009-1373 describes a buffer overflow in Pidgin (formerly Gaim)’s XMPP SOCKS5 bytestream handling when initiating file transfers, exploitable by remote authenticated users to execute arbitrary code. Public advisories (RHSA-2009:1059/1060, OpenSUSE/SUSE/SUSE Finches) confirm the flaw in Pidgin...

7.1CVSS7.7AI score0.04272EPSS
Exploits1References25Affected Software1
Gentoo Linux
Gentoo Linux
added 2009/05/25 12:0 a.m.39 views

Pidgin: Multiple vulnerabilities

Background Pidgin formerly Gaim is an instant messaging client for a variety of instant messaging protocols. Description Multiple vulnerabilities have been discovered in Pidgin: Veracode reported a boundary error in the "XMPP SOCKS5 bytestream server" when initiating an outgoing file transfer...

9.3CVSS8.9AI score0.13294EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2009/04/23 12:0 a.m.37 views

FreeBSD : xchat remotely exploitable buffer overflow (Socks5) (8338a20f-9573-11d8-9366-0020ed76ef5a)

A straightforward stack-based buffer overflow exists in XChat's Socks5 proxy support. The XChat developers report that tsifra' discovered this issue. NOTE: XChat Socks5 support is disabled by support in the FreeBSD Ports Collection. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

7.5CVSS5.8AI score0.08961EPSS
Exploits0References4
NVD
NVD
added 2009/03/03 4:30 p.m.10 views

CVE-2008-6393

PSI Jabber client before 0.12.1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a file transfer request with a negative value in a SOCKS5 option, which bypasses a signed integer check and triggers an integer overflow and a heap-based buffer...

10CVSS7.8AI score0.18201EPSS
Exploits1References14
UbuntuCve
UbuntuCve
added 2009/03/03 4:30 p.m.16 views

CVE-2008-6393

PSI Jabber client before 0.12.1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a file transfer request with a negative value in a SOCKS5 option, which bypasses a signed integer check and triggers an integer overflow and a heap-based buffer...

10CVSS6.2AI score0.18201EPSS
Exploits1References1
OSV
OSV
added 2009/03/03 4:30 p.m.2 views

DEBIAN-CVE-2008-6393

PSI Jabber client before 0.12.1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a file transfer request with a negative value in a SOCKS5 option, which bypasses a signed integer check and triggers an integer overflow and a heap-based buffer...

10CVSS8.3AI score0.18201EPSS
Exploits1References1
Prion
Prion
added 2009/03/03 4:30 p.m.10 views

Integer overflow

PSI Jabber client before 0.12.1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a file transfer request with a negative value in a SOCKS5 option, which bypasses a signed integer check and triggers an integer overflow and a heap-based buffer...

10CVSS8.1AI score0.18201EPSS
Exploits1References14Affected Software1
CVE
CVE
added 2009/03/03 4:0 p.m.58 views

CVE-2008-6393

CVE-2008-6393 affects the PSI Jabber client prior to 0.12.1. A remote attacker can trigger a denial of service and potentially arbitrary code execution via a file transfer request containing a negative value in a SOCKS5 option, bypassing a signed integer check and causing an integer overflow lead...

10CVSS7.9AI score0.18201EPSS
Exploits1References14Affected Software1
Debian CVE
Debian CVE
added 2009/03/03 4:0 p.m.44 views

CVE-2008-6393

PSI Jabber client before 0.12.1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a file transfer request with a negative value in a SOCKS5 option, which bypasses a signed integer check and triggers an integer overflow and a heap-based buffer...

10CVSS7.6AI score0.18201EPSS
Exploits1
Packet Storm
Packet Storm
added 2008/12/30 12:0 a.m.38 views

PSI Integer Overflow Denial Of Service

============================================= INTERNET SECURITY AUDITORS ALERT 2008-004 - Original release date: 12th December, 2008 - Last revised: 22nd December, 2008 - Discovered by: Jesus Olmos Gonzalez - Severity: 4/5 ============================================= I. VULNERABILITY...

0.4AI score
Exploits0
seebug.org
seebug.org
added 2008/06/05 12:0 a.m.14 views

XChat 1.8.0/2.0.8 socks5 Remote Buffer overflow Exploit

No description provided by source. / X-Chatv1.8.0 - v2.0.8: socks-5 remote buffer overflow exploit. ...

7.1AI score
Exploits0
myhack58
myhack58
added 2007/11/22 12:0 a.m.32 views

With SockOnline software easily break the port restriction-vulnerability warning-the black bar safety net

Fiis divided into the Sock, HTTP, FTP, and other types, respectively suitable for different applications. However, sometimes the network is only open 8 0 port for HTTP web browsing. Faced with this situation, we must do nothing? Of course not, in SockOnline this special agent software help, we ca...

6.9AI score
Exploits0
CVE
CVE
added 2007/10/31 4:0 p.m.46 views

CVE-2002-2367

CVE-2002-2367 affects NEC SOCKS5 1.0 r11 and earlier. The issue is an off-by-one buffer overflow in hostname handling, enabling a remote attacker to cause a denial of service and potentially execute arbitrary code. Exploitation is described via a long hostname. No remediation details are provided...

7.8CVSS8.5AI score0.05409EPSS
Exploits1References3Affected Software1
EUVD
EUVD
added 2007/10/31 4:0 p.m.5 views

EUVD-2002-2346

Multiple buffer overflows in NEC SOCKS5 1.0 r11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via a long username to 1 the GetString function in proxy.c for the SOCKS5 module or 2 the HandleS4Connection function in proxy.c for the SOCKS4 modul...

10CVSS7.9AI score0.06887EPSS
Exploits1References4
Cvelist
Cvelist
added 2007/10/31 4:0 p.m.21 views

CVE-2002-2367

Off-by-one buffer overflow in NEC SOCKS5 1.0 r11 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long hostname...

8.2AI score0.05409EPSS
Exploits1References3
Rows per page
Query Builder