1106 matches found
SuSE 11 Security Update : pidgin (SAT Patch Number 2019)
This update of pidgin fixes various security vulnerabilities : - Remote file disclosure vulnerability by using the MSN protocol. CVE-2010-0013: CVSS v2 Base Score: 4.3 : Path Traversal CWE-22 - MSN protocol plugin in libpurple allowed remote attackers to cause a denial of service memory corruptio...
Fedora Update for ejabberd FEDORA-2010-1281
Check for the Version of ejabberd OpenVAS Vulnerability Test Fedora Update for ejabberd FEDORA-2010-1281 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Pidgin多个拒绝服务漏洞
BUGTRAQ ID: 38294 CVE ID: CVE-2010-0277,CVE-2010-0420,CVE-2010-0423 Pidgin是支持多种协议的即时通讯客户端。 Pidgin的MSN协议实现处理MSNSLP邀请的方式存在输入过滤漏洞,远程攻击者可以发送特制的INVITE请求导致拒绝服务(内存破坏和 Pidgin崩溃)。 Finch的XMPP聊天实现在使用多用户会话时存在拒绝服务漏洞。如果多用户聊天会话中的Finch用户要将昵称更改为包含有HTML br元素,就会导致Finch崩溃。...
Code injection
libpurple in Finch in Pidgin before 2.6.6, when an XMPP multi-user chat MUC room is used, does not properly parse nicknames containing sequences, which allows remote attackers to cause a denial of service application crash via a crafted nickname...
CVE-2010-0420
libpurple in Finch in Pidgin before 2.6.6, when an XMPP multi-user chat MUC room is used, does not properly parse nicknames containing sequences, which allows remote attackers to cause a denial of service application crash via a crafted nickname...
CVE-2010-0420
libpurple in Finch in Pidgin before 2.6.6, when an XMPP multi-user chat MUC room is used, does not properly parse nicknames containing sequences, which allows remote attackers to cause a denial of service application crash via a crafted nickname...
CVE-2010-0420
Pidgin (finch) libpurple vulnerability CVE-2010-0420 affects Finch’s XMPP MUC implementation. A crafted MUC nickname containing HTML sequences can be parsed incorrectly, allowing a remote attacker to crash the application (DoS). Affected software includes libpurple in Finch/Pidgin prior to v2.6....
CVE-2010-0420
libpurple in Finch in Pidgin before 2.6.6, when an XMPP multi-user chat MUC room is used, does not properly parse nicknames containing sequences, which allows remote attackers to cause a denial of service application crash via a crafted nickname...
CentOS Update for finch CESA-2010:0115 centos4 i386
Check for the Version of finch OpenVAS Vulnerability Test CentOS Update for finch CESA-2010:0115 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...
finch, libpurple, pidgin security update
CentOS Errata and Security Advisory CESA-2010:0115 Updated pidgin packages that fix three security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pidgin is an instant messaging...
RedHat Update for pidgin RHSA-2010:0115-01
Check for the Version of pidgin OpenVAS Vulnerability Test RedHat Update for pidgin RHSA-2010:0115-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
pidgin: Finch XMPP MUC Crash
libpurple in Finch in Pidgin before 2.6.6, when an XMPP multi-user chat MUC room is used, does not properly parse nicknames containing sequences, which allows remote attackers to cause a denial of service application crash via a crafted nickname...
Moderate: Red Hat Security Advisory: pidgin security update
Updated pidgin packages that fix three security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program which can log in to multiple accounts on...
CVE-2010-0420
libpurple in Finch in Pidgin before 2.6.6, when an XMPP multi-user chat MUC room is used, does not properly parse nicknames containing sequences, which allows remote attackers to cause a denial of service application crash via a crafted nickname...
ejabberd Detection (XMPP)
XMPP based detection of ejabberd. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.100486";...
XMPP (Jabber) Server / Client Detection (TCP)
TCP based detection of services supporting the Extensible Messaging and Presence Protocol XMPP formerly named Jabber. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
[SECURITY] Fedora 11 Update: ejabberd-2.1.2-2.fc11
ejabberd is a Free and Open Source distributed fault-tolerant Jabber/XMPP server. It is mostly written in Erlang, and runs on many platforms tested on Linux, FreeBSD, NetBSD, Solaris, Mac OS X and Windows NT/2000/XP...
[SECURITY] Fedora 12 Update: ejabberd-2.1.2-2.fc12
ejabberd is a Free and Open Source distributed fault-tolerant Jabber/XMPP server. It is mostly written in Erlang, and runs on many platforms tested on Linux, FreeBSD, NetBSD, Solaris, Mac OS X and Windows NT/2000/XP...
ejabberd -- queue overload denial of service vulnerability
The Red Hat security response team reports: A remotely exploitable DoS from XMPP client to ejabberd server via too many "client2server" messages causing the message queue on the server to get overloaded, leading to server crash has been found...
Ubuntu: Security Advisory (USN-886-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...