Test ID:	1.3.6.1.4.1.25623.1.0.66406
Category:	Mandrake Local Security Checks
Title:	Mandriva Security Advisory MDVSA-2009:321 (pidgin)
Summary:	The remote host is missing an update to pidgin;announced via advisory MDVSA-2009:321.
Description:	Summary: The remote host is missing an update to pidgin announced via advisory MDVSA-2009:321. Vulnerability Insight: For details on the issues addressed with this update, please visit the referenced security advisories. Affected: 2008.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2008-3532 30553 http://www.securityfocus.com/bid/30553 31390 http://secunia.com/advisories/31390 32859 http://secunia.com/advisories/32859 33102 http://secunia.com/advisories/33102 ADV-2008-2318 http://www.vupen.com/english/advisories/2008/2318 MDVSA-2009:025 http://www.mandriva.com/security/advisories?name=MDVSA-2009:025 RHSA-2008:1023 http://www.redhat.com/support/errata/RHSA-2008-1023.html USN-675-1 http://www.ubuntu.com/usn/USN-675-1 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=492434 http://developer.pidgin.im/attachment/ticket/6500/nss-cert-verify.patch http://developer.pidgin.im/attachment/ticket/6500/nss_add_rev.patch http://developer.pidgin.im/ticket/6500 http://support.avaya.com/elmodocs2/security/ASA-2008-493.htm oval:org.mitre.oval:def:10979 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10979 oval:org.mitre.oval:def:18327 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18327 pidgin-ssl-spoofing(44220) https://exchange.xforce.ibmcloud.com/vulnerabilities/44220 Common Vulnerability Exposure (CVE) ID: CVE-2008-2955 20080626 Pidgin 2.4.1 Vulnerability http://www.securityfocus.com/archive/1/493682/100/0/threaded 29985 http://www.securityfocus.com/bid/29985 30881 http://secunia.com/advisories/30881 3966 http://securityreason.com/securityalert/3966 ADV-2008-1947 http://www.vupen.com/english/advisories/2008/1947 oval:org.mitre.oval:def:10131 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10131 oval:org.mitre.oval:def:18050 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18050 Common Vulnerability Exposure (CVE) ID: CVE-2008-2957 [oss-security] 20080627 CVE Request (pidgin) http://www.openwall.com/lists/oss-security/2008/06/27/3 http://crisp.cs.du.edu/?q=ca2007-1 oval:org.mitre.oval:def:17599 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17599 oval:org.mitre.oval:def:9076 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9076 Common Vulnerability Exposure (CVE) ID: CVE-2009-1373 35067 http://www.securityfocus.com/bid/35067 35188 http://secunia.com/advisories/35188 35194 http://secunia.com/advisories/35194 35202 http://secunia.com/advisories/35202 35215 http://secunia.com/advisories/35215 35294 http://secunia.com/advisories/35294 35329 http://secunia.com/advisories/35329 35330 http://secunia.com/advisories/35330 ADV-2009-1396 http://www.vupen.com/english/advisories/2009/1396 DSA-1805 http://debian.org/security/2009/dsa-1805 FEDORA-2009-5552 https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00033.html FEDORA-2009-5583 https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00051.html FEDORA-2009-5597 https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00075.html GLSA-200905-07 http://www.gentoo.org/security/en/glsa/glsa-200905-07.xml MDVSA-2009:140 http://www.mandriva.com/security/advisories?name=MDVSA-2009:140 MDVSA-2009:173 http://www.mandriva.com/security/advisories?name=MDVSA-2009:173 RHSA-2009:1059 http://www.redhat.com/support/errata/RHSA-2009-1059.html RHSA-2009:1060 http://www.redhat.com/support/errata/RHSA-2009-1060.html USN-781-1 http://www.ubuntu.com/usn/USN-781-1 USN-781-2 http://www.ubuntu.com/usn/USN-781-2 http://www.pidgin.im/news/security/?id=29 https://bugzilla.redhat.com/show_bug.cgi?id=500488 oval:org.mitre.oval:def:17722 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17722 oval:org.mitre.oval:def:9005 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9005 pidgin-xmppsocks5-bo(50682) https://exchange.xforce.ibmcloud.com/vulnerabilities/50682 Common Vulnerability Exposure (CVE) ID: CVE-2009-1374 http://www.pidgin.im/news/security/?id=30 https://bugzilla.redhat.com/show_bug.cgi?id=500490 oval:org.mitre.oval:def:11654 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11654 oval:org.mitre.oval:def:18201 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18201 pidgin-decryptout-bo(50684) https://exchange.xforce.ibmcloud.com/vulnerabilities/50684 Common Vulnerability Exposure (CVE) ID: CVE-2009-1375 54649 http://osvdb.org/54649 http://www.pidgin.im/news/security/?id=31 https://bugzilla.redhat.com/show_bug.cgi?id=500491 oval:org.mitre.oval:def:10829 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10829 pidgin-purplecircbuffer-dos(50683) https://exchange.xforce.ibmcloud.com/vulnerabilities/50683 Common Vulnerability Exposure (CVE) ID: CVE-2008-2927 1020451 http://www.securitytracker.com/id?1020451 20080625 Pidgin 2.4.1 Vulnerability http://www.securityfocus.com/archive/1/493682 20080806 rPSA-2008-0246-1 gaim http://www.securityfocus.com/archive/1/495165/100/0/threaded 20080828 ZDI-08-054: Multiple Vendor libpurple MSN Protocol SLP Message Heap Overflow Vulnerability http://www.securityfocus.com/archive/1/495818/100/0/threaded 29956 http://www.securityfocus.com/bid/29956 30971 http://secunia.com/advisories/30971 31016 http://secunia.com/advisories/31016 31105 http://secunia.com/advisories/31105 31387 http://secunia.com/advisories/31387 31642 http://secunia.com/advisories/31642 32861 http://secunia.com/advisories/32861 ADV-2008-2032 http://www.vupen.com/english/advisories/2008/2032/references DSA-1610 http://www.debian.org/security/2008/dsa-1610 MDVSA-2008:143 http://www.mandriva.com/security/advisories?name=MDVSA-2008:143 MDVSA-2009:127 http://www.mandriva.com/security/advisories?name=MDVSA-2009:127 RHSA-2008:0584 http://www.redhat.com/support/errata/RHSA-2008-0584.html USN-675-2 http://www.ubuntu.com/usn/USN-675-2 [oss-security] 20080703 Re: Re: CVE Request (pidgin) http://www.openwall.com/lists/oss-security/2008/07/04/1 [oss-security] 20080704 Re: Re: CVE Request (pidgin) http://www.openwall.com/lists/oss-security/2008/07/03/6 adium-msnprotocol-code-execution(44774) https://exchange.xforce.ibmcloud.com/vulnerabilities/44774 http://developer.pidgin.im/viewmtn/revision/diff/6eb1949a96fa80a4c744fc749c2562abc4cc9ed6/with/c3831c9181f4f61b747321240086ee79e4a08fd8/libpurple/protocols/msn/slplink.c http://developer.pidgin.im/viewmtn/revision/diff/6eb1949a96fa80a4c744fc749c2562abc4cc9ed6/with/c3831c9181f4f61b747321240086ee79e4a08fd8/libpurple/protocols/msnp9/slplink.c http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0246 http://www.pidgin.im/news/security/?id=25 http://www.zerodayinitiative.com/advisories/ZDI-08-054 https://bugzilla.redhat.com/show_bug.cgi?id=453764 https://issues.rpath.com/browse/RPL-2647 oval:org.mitre.oval:def:11695 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11695 oval:org.mitre.oval:def:17972 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17972 Common Vulnerability Exposure (CVE) ID: CVE-2009-1376 37071 http://secunia.com/advisories/37071 http://www.pidgin.im/news/security/?id=32 https://bugzilla.redhat.com/show_bug.cgi?id=500493 oval:org.mitre.oval:def:10476 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10476 oval:org.mitre.oval:def:18432 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18432 pidgin-msn-slp-bo(50680) https://exchange.xforce.ibmcloud.com/vulnerabilities/50680 Common Vulnerability Exposure (CVE) ID: CVE-2009-1889 35530 http://www.securityfocus.com/bid/35530 35693 http://secunia.com/advisories/35693 35697 http://secunia.com/advisories/35697 35706 http://secunia.com/advisories/35706 ADV-2009-1749 http://www.vupen.com/english/advisories/2009/1749 FEDORA-2009-7359 https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00162.html FEDORA-2009-7370 https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00176.html FEDORA-2009-7415 https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00228.html RHSA-2009:1139 http://www.redhat.com/support/errata/RHSA-2009-1139.html USN-796-1 http://www.ubuntu.com/usn/USN-796-1 [devel] 20090528 [patch] libpurple/protocols/oscar: OOM and die on misparsed ICQWebMessage as ICQSMS http://pidgin.im/pipermail/devel/2009-May/008227.html http://developer.pidgin.im/ticket/9483 https://bugzilla.redhat.com/show_bug.cgi?id=508738 oval:org.mitre.oval:def:10004 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10004 pidgin-oscar-dos(51448) https://exchange.xforce.ibmcloud.com/vulnerabilities/51448 Common Vulnerability Exposure (CVE) ID: CVE-2009-2694 Debian Security Information: DSA-1870 (Google Search) http://www.debian.org/security/2009/dsa-1870 http://www.exploit-db.com/exploits/9615 http://www.coresecurity.com/content/libpurple-arbitrary-write https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10319 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6320 RedHat Security Advisories: RHSA-2009:1218 https://rhn.redhat.com/errata/RHSA-2009-1218.html http://secunia.com/advisories/36384 http://secunia.com/advisories/36392 http://secunia.com/advisories/36401 http://secunia.com/advisories/36402 http://secunia.com/advisories/36708 http://sunsolve.sun.com/search/document.do?assetkey=1-66-266908-1 http://www.vupen.com/english/advisories/2009/2303 http://www.vupen.com/english/advisories/2009/2663 Common Vulnerability Exposure (CVE) ID: CVE-2009-3025 http://www.openwall.com/lists/oss-security/2009/08/19/2 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6167 XForce ISS Database: pidgin-unspecified-dos(52994) https://exchange.xforce.ibmcloud.com/vulnerabilities/52994 Common Vulnerability Exposure (CVE) ID: CVE-2009-3026 BugTraq ID: 36368 http://www.securityfocus.com/bid/36368 http://www.openwall.com/lists/oss-security/2009/08/24/2 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11070 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5757 XForce ISS Database: pidgin-libpurple-weak-security(53000) https://exchange.xforce.ibmcloud.com/vulnerabilities/53000 Common Vulnerability Exposure (CVE) ID: CVE-2009-2703 BugTraq ID: 36277 http://www.securityfocus.com/bid/36277 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11379 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6435 http://secunia.com/advisories/36601 Common Vulnerability Exposure (CVE) ID: CVE-2009-3083 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11852 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6322 Common Vulnerability Exposure (CVE) ID: CVE-2009-3084 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6338 Common Vulnerability Exposure (CVE) ID: CVE-2009-3085 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11223 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6434
Copyright	Copyright (C) 2009 E-Soft Inc.

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.