Test ID:	1.3.6.1.4.1.25623.1.0.53545
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-716-1)
Summary:	The remote host is missing an update for the Debian 'gaim' package(s) announced via the DSA-716-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'gaim' package(s) announced via the DSA-716-1 advisory. Vulnerability Insight: It has been discovered that certain malformed SNAC packets sent by other AIM or ICQ users can trigger an infinite loop in Gaim, a multi-protocol instant messaging client, and hence lead to a denial of service of the client. Two more denial of service conditions have been discovered in newer versions of Gaim which are fixed in the package in sid but are not present in the package in woody. For the stable distribution (woody) this problem has been fixed in version 0.58-2.5. For the unstable distribution (sid) these problems have been fixed in version 1.1.3-1. We recommend that you upgrade your gaim packages. Affected Software/OS: 'gaim' package(s) on Debian 3.0. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2005-0472 12589 http://www.securityfocus.com/bid/12589 14322 http://secunia.com/advisories/14322 20050225 [USN-85-1] Gaim vulnerabilities http://marc.info/?l=bugtraq&m=110935655500670&w=2 CLA-2005:933 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000933 DSA-716 http://www.debian.org/security/2005/dsa-716 FLSA:158543 http://www.securityfocus.com/archive/1/426078/100/0/threaded GLSA-200503-03 http://www.gentoo.org/security/en/glsa/glsa-200503-03.xml MDKSA-2005:049 http://www.mandriva.com/security/advisories?name=MDKSA-2005:049 RHSA-2005:215 http://www.redhat.com/support/errata/RHSA-2005-215.html RHSA-2005:432 http://www.redhat.com/support/errata/RHSA-2005-432.html SUSE-SA:2005:036 http://www.novell.com/linux/security/advisories/2005_36_sudo.html VU#839280 http://www.kb.cert.org/vuls/id/839280 gaim-snac-dos(19380) https://exchange.xforce.ibmcloud.com/vulnerabilities/19380 http://gaim.sourceforge.net/security/index.php?id=10 oval:org.mitre.oval:def:10433 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10433
Copyright	Copyright (C) 2008 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.