CVE-2013-6483

The XMPP protocol plugin in libpurple in Pidgin before 2.10.8 does not properly determine whether the from address in an iq reply is consistent with the to address in an iq request, which allows remote attackers to spoof iq traffic or cause a denial of service NULL pointer dereference and...

CVE-2013-6477

Multiple integer signedness errors in libpurple in Pidgin before 2.10.8 allow remote attackers to cause a denial of service application crash via a crafted timestamp value in an XMPP message...

Pidgin < 2.10.8 Multiple Vulnerabilities

The version of Pidgin installed on the remote host is a version prior to 2.10.8. It is, therefore, potentially affected by the following vulnerabilities : - The bundled version of Pango has an error that can lead to an application crash when rendering fonts and attempting to display certain Unico...

Cisco Unified Presence Server Web接口SQL注入漏洞

BUGTRAQ ID: 64551 CVECAN ID: CVE-2013-6983 Cisco Unified Presence是由Jabber XMPP驱动的企业级平台，能够收集有关用户可用性和通信功能的信息，以提供统一用户在网状态，为思科统一通信和关键业务应用提供支持基于在网状态的通信。 Cisco Unified Presence Server 8.64版本的Web接口存在安全漏洞，可使经过身份验证的远程攻击者影响受影响系统的机密性、完整性、可用性。此漏洞源于没有正确验证SQL查询内的用户输入。攻击者通过特制的URL，包括SQL语句利用此漏洞。 0 Cisco Unified...

[Cryptocat] Chat Client with encrypted conversations on iPhone and Android

Cryptocat is an experimental browser-based chat client for easy to use, encrypted conversations. It aims to make encrypted, private chat easy to use and accessible. We want to break down the barrier that prevents the general public from having an accessible privacy alternative that they already...

[THC-Hydra 7.5] Fast Parallel Network Logon Cracker

Hydra is a parallelized network logon cracker which supports numerous protocols to attack, new modules are easy to add, beside that, it is flexible and very fast. Features IPv6 Support Graphic User Interface Internationalized support RFC 4013 HTTP proxy support SOCKS proxy support The tool suppor...

How Dark Mail Plans to Build an Open, Secure Email Platform

The new Dark Mail Alliance formed this week by Lavabit and Silent Circle will offer an open platform for secure email that will use existing protocols and cloud storage as a way to evade surveillance. The new system, which should be available next year, is in some ways a throwback to the...

Debian Security Advisory DSA 2775-1 (ejabberd - insecure SSL usage)

It was discovered that ejabberd, a Jabber/XMPP server, uses SSLv2 and weak ciphers for communication, which are considered insecure. The software offers no runtime configuration options to disable these. This update disables the use of SSLv2 and weak ciphers. The updated package for Debian 7 whee...

Openfire 3.8.2 server new admin password/add new admin Exploit

This expoit use multiple vulnerabilites in Openfire. Openfire admin must visit exploit link. Attacker can create new admin or change admin password. Openfire is a real time collaboration RTC server licensed under the Open Source Apache License. It uses the only widely adopted open protocol for...

Oracle Linux 4 : pidgin (ELSA-2009-1453)

From Red Hat Security Advisory 2009:1453 : Updated pidgin packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program...

Oracle Linux 4 : pidgin (ELSA-2009-1060)

From Red Hat Security Advisory 2009:1060 : Updated pidgin packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program...

Fedora 18 : telepathy-gabble-0.16.6-1.fc18 (2013-9794)

"This release fixes a man-in-the-middle attack. If you use an unencrypted connection to a 'legacy Jabber' pre-XMPP server, this version of Gabble will not connect until you make one of these configuration changes : - upgrade the server software to something that supports XMPP 1.0; or - use an...

Fedora 19 : telepathy-gabble-0.17.4-1.fc19 (2013-9753)

"This release fixes a man-in-the-middle attack. If you use an unencrypted connection to a 'legacy Jabber' pre-XMPP server, this version of Gabble will not connect until you make one of these configuration changes : - upgrade the server software to something that supports XMPP 1.0; or - use an...

Oracle Linux 3 : pidgin (ELSA-2009-1059)

From Red Hat Security Advisory 2009:1059 : An updated pidgin package that fixes two security issues is now available for Red Hat Enterprise Linux 3. This update has been rated as having important security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program which c...

Oracle Linux 4 : pidgin (ELSA-2010-0788)

From Red Hat Security Advisory 2010:0788 : Updated pidgin packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base...

USN-1873-1: telepathy-gabble vulnerabilities

Maksim Otstavnov discovered that telepathy-gabble incorrectly handled TLS when connecting to legacy jabber servers. If a remote attacker were able to perform a machine-in-the-middle attack, this flaw could be exploited to view sensitive information. CVE-2013-1431 It was discovered that...

Fedora Update for telepathy-gabble FEDORA-2013-9794

Check for the Version of telepathy-gabble OpenVAS Vulnerability Test Fedora Update for telepathy-gabble FEDORA-2013-9794 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modi...

[SECURITY] Fedora 18 Update: telepathy-gabble-0.16.6-1.fc18

A Jabber/XMPP connection manager, that handles single and multi-user chats and voice calls...

[SECURITY] Fedora 19 Update: telepathy-gabble-0.17.4-1.fc19

A Jabber/XMPP connection manager, that handles single and multi-user chats and voice calls...

[SECURITY] [DSA 2702-1] telepathy-gabble security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2702-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso June 03, 2013 http://www.debian.org/security/faq -...