Full Disclosure mailing list archives
Re: [SECURITY] [DSA 1870-1] New pidgin packages fix arbitrary code execution
From: Nico Golde <fd () ngolde de>
Date: Thu, 20 Aug 2009 04:02:50 +0200
Hi, * Nico Golde <nion () debian org> [2009-08-20 03:28]:
-------------------------------------------------------------------------- Debian Security Advisory DSA-1870-1 security () debian org http://www.debian.org/security/ Nico Golde August 19th, 2009 http://www.debian.org/security/faq -------------------------------------------------------------------------- Package : pidgin Vulnerability : insufficient input validation Problem type : remote Debian-specific: no CVE ID : CVE-2009-2694 Federico Muttis discovered that libpurple, the shared library that adds support for various instant messaging networks to the pidgin IM client, is vulnerable to a heap-based buffer overflow. This issue exists because of an incomplete fix for CVE-2008-2927 and CVE-2009-1376. An attacker can exploit this by sending two consecutive SLP packets to a victim via MSN.
[...] Sorry, just got used to writing that, this is no buffer overflow. Actually the attacker can write to almost any arbitrary location. Cheers Nico -- Nico Golde - JAB: nion () jabber ccc de | GPG: 0x73647CFF Forget about that mouse with 3/4/5 buttons - gimme a keyboard with 103/104/105 keys!
Attachment:
_bin
Description:
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- [SECURITY] [DSA 1870-1] New pidgin packages fix arbitrary code execution Nico Golde (Aug 19)
- Re: [SECURITY] [DSA 1870-1] New pidgin packages fix arbitrary code execution Nico Golde (Aug 19)