Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 145615 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.1.13.2013.044.01
Kategorie:Slackware Local Security Checks
Titel:Slackware: Security Advisory (SSA:2013-044-01)
Zusammenfassung:The remote host is missing an update for the 'pidgin' package(s) announced via the SSA:2013-044-01 advisory.
Beschreibung:Summary:
The remote host is missing an update for the 'pidgin' package(s) announced via the SSA:2013-044-01 advisory.

Vulnerability Insight:
New pidgin packages are available for Slackware 12.2, 13.0, 13.1, 13.37, 14.0,
and -current to fix security issues.


Here are the details from the Slackware 14.0 ChangeLog:
+--------------------------+
patches/packages/pidgin-2.10.7-i486-1_slack14.0.txz: Upgraded.
This update fixes several security issues:
Remote MXit user could specify local file path.
MXit buffer overflow reading data from network.
Sametime crash with long user IDs.
Crash when receiving a UPnP response with abnormally long values.
For more information, see:
[links moved to references]
(* Security fix *)
+--------------------------+

Affected Software/OS:
'pidgin' package(s) on Slackware 12.2, Slackware 13.0, Slackware 13.1, Slackware 13.37, Slackware 14.0, Slackware current.

Solution:
Please install the updated package(s).

CVSS Score:
6.8

CVSS Vector:
AV:N/AC:M/Au:N/C:P/I:P/A:P

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2013-0271
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18386
SuSE Security Announcement: SUSE-SU-2013:0388 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00003.html
SuSE Security Announcement: openSUSE-SU-2013:0405 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00006.html
http://www.ubuntu.com/usn/USN-1746-1
Common Vulnerability Exposure (CVE) ID: CVE-2013-0272
BugTraq ID: 57951
http://www.securityfocus.com/bid/57951
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17474
SuSE Security Announcement: openSUSE-SU-2013:0407 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00007.html
Common Vulnerability Exposure (CVE) ID: CVE-2013-0273
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18340
Common Vulnerability Exposure (CVE) ID: CVE-2013-0274
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18221
CopyrightCopyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.