CVE-2004-0006

2004-03-0300:00:00

ubuntu.com

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.209 Low

EPSS

Percentile

96.3%

JSON

Multiple buffer overflows in Gaim 0.75 and earlier, and Ultramagnetic
before 0.81, allow remote attackers to cause a denial of service and
possibly execute arbitrary code via (1) cookies in a Yahoo web connection,
(2) a long name parameter in the Yahoo login web page, (3) a long value
parameter in the Yahoo login page, (4) a YMSG packet, (5) the URL parser,
and (6) HTTP proxy connect.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchgaim< 1.5.0+1.5.1cvs20051015-1ubuntu10UNKNOWN
ubuntu6.10noarchgaim< 1.5.0+1.5.1cvs20051015-1ubuntu10UNKNOWN
ubuntu7.04noarchgaim< 1.5.0+1.5.1cvs20051015-1ubuntu10UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	gaim	< 1.5.0+1.5.1cvs20051015-1ubuntu10	UNKNOWN
ubuntu	6.10	noarch	gaim	< 1.5.0+1.5.1cvs20051015-1ubuntu10	UNKNOWN
ubuntu	7.04	noarch	gaim	< 1.5.0+1.5.1cvs20051015-1ubuntu10	UNKNOWN