Test ID:	1.3.6.1.4.1.25623.1.0.52328
Category:	FreeBSD Local Security Checks
Title:	FreeBSD Ports: gaim, ja-gaim, ru-gaim
Summary:	The remote host is missing an update to the system; as announced in the referenced advisory.
Description:	Summary: The remote host is missing an update to the system as announced in the referenced advisory. Vulnerability Insight: The following packages are affected: gaim ja-gaim ru-gaim CVE-2004-0891 Buffer overflow in the MSN protocol handler for gaim 0.79 to 1.0.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an 'unexpected sequence of MSNSLP messages' that results in an unbounded copy operation that writes to the wrong buffer. Solution: Update your system with the appropriate patches or software upgrades. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2004-0891 https://bugzilla.fedora.us/show_bug.cgi?id=2188 http://www.gentoo.org/security/en/glsa/glsa-200410-23.xml https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11790 http://www.redhat.com/support/errata/RHSA-2004-604.html https://www.ubuntu.com/usn/usn-8-1/ XForce ISS Database: gaim-file-transfer-dos(17790) https://exchange.xforce.ibmcloud.com/vulnerabilities/17790 XForce ISS Database: gaim-msn-slp-bo(17786) https://exchange.xforce.ibmcloud.com/vulnerabilities/17786 XForce ISS Database: gaim-msn-slp-dos(17787) https://exchange.xforce.ibmcloud.com/vulnerabilities/17787
Copyright	Copyright (C) 2008 E-Soft Inc.

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.