CVE ID:	CVE-2009-1373
Description:	Buffer overflow in the XMPP SOCKS5 bytestream server in Pidgin (formerly Gaim) before 2.5.6 allows remote authenticated users to execute arbitrary code via vectors involving an outbound XMPP file transfer. NOTE: some of these details are obtained from third party information.
Test IDs:	1.3.6.1.4.1.25623.1.0.64103   1.3.6.1.4.1.25623.1.0.64266   1.3.6.1.4.1.25623.1.0.64106   1.3.6.1.4.1.25623.1.0.64101   1.3.6.1.4.1.25623.1.0.64038
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2009-1373 Debian Security Information: DSA-1805 (Google Search) http://debian.org/security/2009/dsa-1805 https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00033.html https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00051.html https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00075.html http://www.gentoo.org/security/en/glsa/glsa-200905-07.xml http://www.mandriva.com/security/advisories?name=MDVSA-2009:140 http://www.mandriva.com/security/advisories?name=MDVSA-2009:173 RedHat Security Advisories: RHSA-2009:1059 http://www.redhat.com/support/errata/RHSA-2009-1059.html RedHat Security Advisories: RHSA-2009:1060 http://www.redhat.com/support/errata/RHSA-2009-1060.html http://www.ubuntu.com/usn/USN-781-1 http://www.ubuntu.com/usn/USN-781-2 BugTraq ID: 35067 http://www.securityfocus.com/bid/35067 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9005 http://secunia.com/advisories/35194 http://secunia.com/advisories/35202 http://secunia.com/advisories/35188 http://secunia.com/advisories/35215 http://secunia.com/advisories/35294 http://secunia.com/advisories/35329 http://secunia.com/advisories/35330 http://www.vupen.com/english/advisories/2009/1396 XForce ISS Database: pidgin-xmppsocks5-bo(50682) http://xforce.iss.net/xforce/xfdb/50682

New User Registration Email: UserID: Passwd: Please email me your monthly newsletters, informing the latest services, improvements & surveys. Please email me a vulnerability test announcement whenever a new test is added.     Privacy

Registered User Login   UserID:     Passwd:     Forgot userid or passwd? Email/Userid: