ID de Prueba:	1.3.6.1.4.1.25623.1.0.66406
Categoría:	Mandrake Local Security Checks
Título:	Mandriva Security Advisory MDVSA-2009:321 (pidgin)
Resumen:	The remote host is missing an update to pidgin;announced via advisory MDVSA-2009:321.
Descripción:	Summary: The remote host is missing an update to pidgin announced via advisory MDVSA-2009:321. Vulnerability Insight: For details on the issues addressed with this update, please visit the referenced security advisories. Affected: 2008.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2008-3532 30553 http://www.securityfocus.com/bid/30553 31390 http://secunia.com/advisories/31390 32859 http://secunia.com/advisories/32859 33102 http://secunia.com/advisories/33102 ADV-2008-2318 http://www.vupen.com/english/advisories/2008/2318 MDVSA-2009:025 http://www.mandriva.com/security/advisories?name=MDVSA-2009:025 RHSA-2008:1023 http://www.redhat.com/support/errata/RHSA-2008-1023.html USN-675-1 http://www.ubuntu.com/usn/USN-675-1 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=492434 http://developer.pidgin.im/attachment/ticket/6500/nss-cert-verify.patch http://developer.pidgin.im/attachment/ticket/6500/nss_add_rev.patch http://developer.pidgin.im/ticket/6500 http://support.avaya.com/elmodocs2/security/ASA-2008-493.htm oval:org.mitre.oval:def:10979 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10979 oval:org.mitre.oval:def:18327 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18327 pidgin-ssl-spoofing(44220) https://exchange.xforce.ibmcloud.com/vulnerabilities/44220 Common Vulnerability Exposure (CVE) ID: CVE-2008-2955 20080626 Pidgin 2.4.1 Vulnerability http://www.securityfocus.com/archive/1/493682/100/0/threaded 29985 http://www.securityfocus.com/bid/29985 30881 http://secunia.com/advisories/30881 3966 http://securityreason.com/securityalert/3966 ADV-2008-1947 http://www.vupen.com/english/advisories/2008/1947 oval:org.mitre.oval:def:10131 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10131 oval:org.mitre.oval:def:18050 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18050 Common Vulnerability Exposure (CVE) ID: CVE-2008-2957 [oss-security] 20080627 CVE Request (pidgin) http://www.openwall.com/lists/oss-security/2008/06/27/3 http://crisp.cs.du.edu/?q=ca2007-1 oval:org.mitre.oval:def:17599 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17599 oval:org.mitre.oval:def:9076 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9076 Common Vulnerability Exposure (CVE) ID: CVE-2009-1373 35067 http://www.securityfocus.com/bid/35067 35188 http://secunia.com/advisories/35188 35194 http://secunia.com/advisories/35194 35202 http://secunia.com/advisories/35202 35215 http://secunia.com/advisories/35215 35294 http://secunia.com/advisories/35294 35329 http://secunia.com/advisories/35329 35330 http://secunia.com/advisories/35330 ADV-2009-1396 http://www.vupen.com/english/advisories/2009/1396 DSA-1805 http://debian.org/security/2009/dsa-1805 FEDORA-2009-5552 https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00033.html FEDORA-2009-5583 https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00051.html FEDORA-2009-5597 https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00075.html GLSA-200905-07 http://www.gentoo.org/security/en/glsa/glsa-200905-07.xml MDVSA-2009:140 http://www.mandriva.com/security/advisories?name=MDVSA-2009:140 MDVSA-2009:173 http://www.mandriva.com/security/advisories?name=MDVSA-2009:173 RHSA-2009:1059 http://www.redhat.com/support/errata/RHSA-2009-1059.html RHSA-2009:1060 http://www.redhat.com/support/errata/RHSA-2009-1060.html USN-781-1 http://www.ubuntu.com/usn/USN-781-1 USN-781-2 http://www.ubuntu.com/usn/USN-781-2 http://www.pidgin.im/news/security/?id=29 https://bugzilla.redhat.com/show_bug.cgi?id=500488 oval:org.mitre.oval:def:17722 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17722 oval:org.mitre.oval:def:9005 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9005 pidgin-xmppsocks5-bo(50682) https://exchange.xforce.ibmcloud.com/vulnerabilities/50682 Common Vulnerability Exposure (CVE) ID: CVE-2009-1374 http://www.pidgin.im/news/security/?id=30 https://bugzilla.redhat.com/show_bug.cgi?id=500490 oval:org.mitre.oval:def:11654 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11654 oval:org.mitre.oval:def:18201 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18201 pidgin-decryptout-bo(50684) https://exchange.xforce.ibmcloud.com/vulnerabilities/50684 Common Vulnerability Exposure (CVE) ID: CVE-2009-1375 54649 http://osvdb.org/54649 http://www.pidgin.im/news/security/?id=31 https://bugzilla.redhat.com/show_bug.cgi?id=500491 oval:org.mitre.oval:def:10829 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10829 pidgin-purplecircbuffer-dos(50683) https://exchange.xforce.ibmcloud.com/vulnerabilities/50683 Common Vulnerability Exposure (CVE) ID: CVE-2008-2927 1020451 http://www.securitytracker.com/id?1020451 20080625 Pidgin 2.4.1 Vulnerability http://www.securityfocus.com/archive/1/493682 20080806 rPSA-2008-0246-1 gaim http://www.securityfocus.com/archive/1/495165/100/0/threaded 20080828 ZDI-08-054: Multiple Vendor libpurple MSN Protocol SLP Message Heap Overflow Vulnerability http://www.securityfocus.com/archive/1/495818/100/0/threaded 29956 http://www.securityfocus.com/bid/29956 30971 http://secunia.com/advisories/30971 31016 http://secunia.com/advisories/31016 31105 http://secunia.com/advisories/31105 31387 http://secunia.com/advisories/31387 31642 http://secunia.com/advisories/31642 32861 http://secunia.com/advisories/32861 ADV-2008-2032 http://www.vupen.com/english/advisories/2008/2032/references DSA-1610 http://www.debian.org/security/2008/dsa-1610 MDVSA-2008:143 http://www.mandriva.com/security/advisories?name=MDVSA-2008:143 MDVSA-2009:127 http://www.mandriva.com/security/advisories?name=MDVSA-2009:127 RHSA-2008:0584 http://www.redhat.com/support/errata/RHSA-2008-0584.html USN-675-2 http://www.ubuntu.com/usn/USN-675-2 [oss-security] 20080703 Re: Re: CVE Request (pidgin) http://www.openwall.com/lists/oss-security/2008/07/04/1 [oss-security] 20080704 Re: Re: CVE Request (pidgin) http://www.openwall.com/lists/oss-security/2008/07/03/6 adium-msnprotocol-code-execution(44774) https://exchange.xforce.ibmcloud.com/vulnerabilities/44774 http://developer.pidgin.im/viewmtn/revision/diff/6eb1949a96fa80a4c744fc749c2562abc4cc9ed6/with/c3831c9181f4f61b747321240086ee79e4a08fd8/libpurple/protocols/msn/slplink.c http://developer.pidgin.im/viewmtn/revision/diff/6eb1949a96fa80a4c744fc749c2562abc4cc9ed6/with/c3831c9181f4f61b747321240086ee79e4a08fd8/libpurple/protocols/msnp9/slplink.c http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0246 http://www.pidgin.im/news/security/?id=25 http://www.zerodayinitiative.com/advisories/ZDI-08-054 https://bugzilla.redhat.com/show_bug.cgi?id=453764 https://issues.rpath.com/browse/RPL-2647 oval:org.mitre.oval:def:11695 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11695 oval:org.mitre.oval:def:17972 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17972 Common Vulnerability Exposure (CVE) ID: CVE-2009-1376 37071 http://secunia.com/advisories/37071 http://www.pidgin.im/news/security/?id=32 https://bugzilla.redhat.com/show_bug.cgi?id=500493 oval:org.mitre.oval:def:10476 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10476 oval:org.mitre.oval:def:18432 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18432 pidgin-msn-slp-bo(50680) https://exchange.xforce.ibmcloud.com/vulnerabilities/50680 Common Vulnerability Exposure (CVE) ID: CVE-2009-1889 35530 http://www.securityfocus.com/bid/35530 35693 http://secunia.com/advisories/35693 35697 http://secunia.com/advisories/35697 35706 http://secunia.com/advisories/35706 ADV-2009-1749 http://www.vupen.com/english/advisories/2009/1749 FEDORA-2009-7359 https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00162.html FEDORA-2009-7370 https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00176.html FEDORA-2009-7415 https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00228.html RHSA-2009:1139 http://www.redhat.com/support/errata/RHSA-2009-1139.html USN-796-1 http://www.ubuntu.com/usn/USN-796-1 [devel] 20090528 [patch] libpurple/protocols/oscar: OOM and die on misparsed ICQWebMessage as ICQSMS http://pidgin.im/pipermail/devel/2009-May/008227.html http://developer.pidgin.im/ticket/9483 https://bugzilla.redhat.com/show_bug.cgi?id=508738 oval:org.mitre.oval:def:10004 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10004 pidgin-oscar-dos(51448) https://exchange.xforce.ibmcloud.com/vulnerabilities/51448 Common Vulnerability Exposure (CVE) ID: CVE-2009-2694 Debian Security Information: DSA-1870 (Google Search) http://www.debian.org/security/2009/dsa-1870 http://www.exploit-db.com/exploits/9615 http://www.coresecurity.com/content/libpurple-arbitrary-write https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10319 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6320 RedHat Security Advisories: RHSA-2009:1218 https://rhn.redhat.com/errata/RHSA-2009-1218.html http://secunia.com/advisories/36384 http://secunia.com/advisories/36392 http://secunia.com/advisories/36401 http://secunia.com/advisories/36402 http://secunia.com/advisories/36708 http://sunsolve.sun.com/search/document.do?assetkey=1-66-266908-1 http://www.vupen.com/english/advisories/2009/2303 http://www.vupen.com/english/advisories/2009/2663 Common Vulnerability Exposure (CVE) ID: CVE-2009-3025 http://www.openwall.com/lists/oss-security/2009/08/19/2 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6167 XForce ISS Database: pidgin-unspecified-dos(52994) https://exchange.xforce.ibmcloud.com/vulnerabilities/52994 Common Vulnerability Exposure (CVE) ID: CVE-2009-3026 BugTraq ID: 36368 http://www.securityfocus.com/bid/36368 http://www.openwall.com/lists/oss-security/2009/08/24/2 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11070 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5757 XForce ISS Database: pidgin-libpurple-weak-security(53000) https://exchange.xforce.ibmcloud.com/vulnerabilities/53000 Common Vulnerability Exposure (CVE) ID: CVE-2009-2703 BugTraq ID: 36277 http://www.securityfocus.com/bid/36277 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11379 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6435 http://secunia.com/advisories/36601 Common Vulnerability Exposure (CVE) ID: CVE-2009-3083 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11852 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6322 Common Vulnerability Exposure (CVE) ID: CVE-2009-3084 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6338 Common Vulnerability Exposure (CVE) ID: CVE-2009-3085 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11223 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6434
Copyright	Copyright (C) 2009 E-Soft Inc.

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.