Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2008-2955
HistoryJul 01, 2008 - 12:00 a.m.

CVE-2008-2955

2008-07-0100:00:00
ubuntu.com
ubuntu.com
10

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.059 Low

EPSS

Percentile

93.4%

JSON

Pidgin 2.4.1 allows remote attackers to cause a denial of service (crash)
via a long filename that contains certain characters, as demonstrated using
an MSN message that triggers the crash in the msn_slplink_process_msg
function.

Notes

Author Note
mdeslaur Code in Dapper doesn’t look vulnerable
OSVersionArchitecturePackageVersionFilename
ubuntu7.10noarchpidgin< 1:2.2.1-1ubuntu4.3UNKNOWN
ubuntu8.04noarchpidgin< 1:2.4.1-1ubuntu2.2UNKNOWN

Related

cve 2
cvelist 1
veracode 1
prion 2
debiancve 2
ubuntucve 1
nessus 12
openvas 16
redhat 1
oraclelinux 1
centos 1
ubuntu 2
gentoo 1
cve
cve
CVE-2008-2955
2008-07-01 22:41:00
CVE-2008-2927
2008-07-07 23:41:00
cvelist
cvelist
CVE-2008-2955
2008-07-01 22:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:29:13
prion
prion
Code injection
2008-07-01 22:41:00
Integer overflow
2008-07-07 23:41:00
debiancve
debiancve
CVE-2008-2955
2008-07-01 22:41:00
CVE-2008-2927
2008-07-07 23:41:00
ubuntucve
ubuntucve
CVE-2008-2927
2008-07-07 00:00:00
nessus
nessus
Scientific Linux Security Update : pidgin on SL4.x, SL5.x i386/x86_64
2012-08-01 00:00:00
SuSE 10 Security Update : pidgin, gaim and finch (ZYPP Patch Number 5573)
2011-01-27 00:00:00
Oracle Linux 4 : pidgin (ELSA-2008-1023)
2013-07-12 00:00:00
openvas
openvas
RedHat Update for pidgin RHSA-2008:1023-01
2009-03-06 00:00:00
CentOS Update for finch CESA-2008:1023 centos4 x86_64
2009-02-27 00:00:00
CentOS Update for finch CESA-2008:1023 centos4 x86_64
2009-02-27 00:00:00
redhat
redhat
(RHSA-2008:1023) Moderate: pidgin security and bug fix update
2008-12-15 00:00:00
oraclelinux
oraclelinux
pidgin security and bug fix update
2008-12-15 00:00:00
centos
centos
enscript, finch, libpurple, pidgin security update
2008-12-15 17:14:23
ubuntu
ubuntu
Pidgin vulnerabilities
2008-11-24 00:00:00
Pidgin vulnerabilities
2010-01-18 00:00:00
gentoo
gentoo
Pidgin: Multiple vulnerabilities
2009-01-20 00:00:00

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.059 Low

EPSS

Percentile

93.4%

JSON
Related for UB:CVE-2008-2955
cve2cvelist1veracode1prion2debiancve2ubuntucve1nessus12openvas16redhat1oraclelinux1centos1ubuntu2gentoo1