Test ID:	1.3.6.1.4.1.25623.1.0.840822
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-1273-1)
Summary:	The remote host is missing an update for the 'pidgin' package(s) announced via the USN-1273-1 advisory.
Description:	Summary: The remote host is missing an update for the 'pidgin' package(s) announced via the USN-1273-1 advisory. Vulnerability Insight: Marius Wachtler discovered that Pidgin incorrectly handled malformed YMSG messages in the Yahoo! protocol handler. A remote attacker could send a specially crafted message and cause Pidgin to crash, leading to a denial of service. This issue only affected Ubuntu 10.04 LTS and 10.10. (CVE-2011-1091) Marius Wachtler discovered that Pidgin incorrectly handled HTTP 100 responses in the MSN protocol handler. A remote attacker could send a specially crafted message and cause Pidgin to crash, leading to a denial of service. (CVE-2011-3184) Diego Bauche Madero discovered that Pidgin incorrectly handled UTF-8 sequences in the SILC protocol handler. A remote attacker could send a specially crafted message and cause Pidgin to crash, leading to a denial of service. (CVE-2011-3594) Affected Software/OS: 'pidgin' package(s) on Ubuntu 10.04, Ubuntu 10.10, Ubuntu 11.04. Solution: Please install the updated package(s). CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-1091 43695 http://secunia.com/advisories/43695 43721 http://secunia.com/advisories/43721 46376 http://secunia.com/advisories/46376 46837 http://www.securityfocus.com/bid/46837 ADV-2011-0643 http://www.vupen.com/english/advisories/2011/0643 ADV-2011-0661 http://www.vupen.com/english/advisories/2011/0661 ADV-2011-0669 http://www.vupen.com/english/advisories/2011/0669 ADV-2011-0703 http://www.vupen.com/english/advisories/2011/0703 FEDORA-2011-3113 http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055874.html FEDORA-2011-3150 http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056309.html RHSA-2011:0616 http://www.redhat.com/support/errata/RHSA-2011-0616.html RHSA-2011:1371 http://www.redhat.com/support/errata/RHSA-2011-1371.html SSA:2011-070-02 http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.466884 http://developer.pidgin.im/viewmtn/revision/diff/5cbe18129b6e7c660bc093f7e5e1414ceca17d04/with/a7c415abba1f5f01f79295337518837f73d99bb7/libpurple/protocols/yahoo/libymsg.c http://developer.pidgin.im/viewmtn/revision/info/a7c415abba1f5f01f79295337518837f73d99bb7 http://www.pidgin.im/news/security/?id=51 https://bugzilla.redhat.com/show_bug.cgi?id=683031 openSUSE-SU-2012:0066 https://hermes.opensuse.org/messages/13195955 oval:org.mitre.oval:def:18402 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18402 pidgin-yahoo-protocol-dos(66055) https://exchange.xforce.ibmcloud.com/vulnerabilities/66055 Common Vulnerability Exposure (CVE) ID: CVE-2011-3184 1025961 http://securitytracker.com/id?1025961 45663 http://secunia.com/advisories/45663 45916 http://secunia.com/advisories/45916 49268 http://www.securityfocus.com/bid/49268 FEDORA-2011-11544 http://lists.fedoraproject.org/pipermail/package-announce/2011-August/064943.html FEDORA-2011-11595 http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065190.html [oss-security] 20110822 Re: CVE request: Pidgin crash http://www.openwall.com/lists/oss-security/2011/08/22/10 http://www.openwall.com/lists/oss-security/2011/08/22/12 http://www.openwall.com/lists/oss-security/2011/08/22/4 http://www.openwall.com/lists/oss-security/2011/08/22/7 http://developer.pidgin.im/viewmtn/revision/diff/5c2dba4a7e2e76b76e7f472b88953a4316706d43/with/16af0661899a978b4fedc1c165965b85009013d1/libpurple/protocols/msn/httpconn.c http://developer.pidgin.im/viewmtn/revision/info/16af0661899a978b4fedc1c165965b85009013d1 http://pidgin.im/news/security/?id=54 https://bugzilla.redhat.com/show_bug.cgi?id=732405 oval:org.mitre.oval:def:18284 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18284 pidgin-msn-protocol-dos(69341) https://exchange.xforce.ibmcloud.com/vulnerabilities/69341 Common Vulnerability Exposure (CVE) ID: CVE-2011-3594 http://www.mandriva.com/security/advisories?name=MDVSA-2011:183 http://developer.pidgin.im/viewmtn/revision/diff/be5e66abad2af29604bc794cc4c6600ab12751f3/with/7eb1f6d56cc58bbb5b56b7df53955d36b9b419b8 https://bugzilla.redhat.com/show_bug.cgi?id=743481 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18034
Copyright	Copyright (C) 2011 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.