exploits , vulnerabilities , articles , Gaim IRC Protocol Plug-in Markup Language Injection Vulnerability

Title	Gaim IRC Protocol Plug-in Markup Language Injection Vulnerability
Published	2005-04-05-12:00AM
Updated	2005-07-13-03:20PM
Class	Input Validation Error
CVE	CAN-2005-0966
Remote	Yes
Local	No
Credit	Discovery of this vulnerability is credited to Jean-Yves Lefort.
Vulnerable	Ubuntu Ubuntu Linux 4.1 ppc Ubuntu Ubuntu Linux 4.1 ia64 Ubuntu Ubuntu Linux 4.1 ia32 Slackware Linux 10.1 SGI ProPack 3.0 S.u.S.E. Linux Professional 9.3 x86_64 S.u.S.E. Linux Professional 9.3 S.u.S.E. Linux Professional 9.2 x86_64 S.u.S.E. Linux Professional 9.2 S.u.S.E. Linux Professional 9.1 x86_64 S.u.S.E. Linux Professional 9.1 S.u.S.E. Linux Professional 9.0 x86_64 S.u.S.E. Linux Professional 9.0 S.u.S.E. Linux Personal 9.3 x86_64 S.u.S.E. Linux Personal 9.3 S.u.S.E. Linux Personal 9.2 x86_64 S.u.S.E. Linux Personal 9.2 S.u.S.E. Linux Personal 9.1 x86_64 S.u.S.E. Linux Personal 9.1 S.u.S.E. Linux Personal 9.0 x86_64 S.u.S.E. Linux Personal 9.0 Rob Flynn Gaim 1.2 Rob Flynn Gaim 1.1.4 Conectiva Linux 4.1 Conectiva Linux 9.0 Conectiva Linux 10.0 Gentoo Linux MandrakeSoft Corporate Server 3.0 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Linux Mandrake 10.1 MandrakeSoft Linux Mandrake 10.1 x86_64 Ubuntu Ubuntu Linux 5.0 4 amd64 Ubuntu Ubuntu Linux 5.0 4 i386 Ubuntu Ubuntu Linux 5.0 4 powerpc Rob Flynn Gaim 1.1.3 RedHat Fedora Core2 RedHat Fedora Core3 Rob Flynn Gaim 1.1.2 RedHat Fedora Core2 RedHat Fedora Core3 Rob Flynn Gaim 1.1.1 Rob Flynn Gaim 1.0.2 Gentoo Linux Slackware Linux current Slackware Linux 9.0 Slackware Linux 9.1 Slackware Linux 10.0 Rob Flynn Gaim 1.0.1 RedHat Desktop 3.0 RedHat Enterprise Linux AS 3 RedHat Enterprise Linux ES 3 RedHat Enterprise Linux WS 3 Rob Flynn Gaim 1.0 Conectiva Linux 9.0 Conectiva Linux 10.0 Ubuntu Ubuntu Linux 4.1 ia32 Ubuntu Ubuntu Linux 4.1 ia64 Ubuntu Ubuntu Linux 4.1 ppc RedHat Fedora Core3 RedHat Fedora Core2 RedHat Enterprise Linux WS 4 RedHat Enterprise Linux WS 3 RedHat Enterprise Linux ES 4 RedHat Enterprise Linux ES 3 RedHat Enterprise Linux AS 4 RedHat Enterprise Linux AS 3 RedHat Desktop 4.0 RedHat Desktop 3.0 Peachtree Linux release 1
Not Vulnerable	Rob Flynn Gaim 1.2.1 Conectiva Linux 9.0 Conectiva Linux 10.0 Gentoo Linux MandrakeSoft Corporate Server 3.0 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Linux Mandrake 10.1 MandrakeSoft Linux Mandrake 10.1 x86_64 RedHat Enterprise Linux AS 3 RedHat Enterprise Linux AS 4 RedHat Enterprise Linux ES 3 RedHat Enterprise Linux ES 4 RedHat Enterprise Linux WS 3 RedHat Enterprise Linux WS 4
Code	Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: content@securitydot.net <mailto:content@securitydot.net>.
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-18 Mozilla Firefox and SeaMonkey NTLM Credential Reflection Authentication Bypass Vulnerability
2009-12-18 Mozilla Firefox CVE-2009-3982 JavaScript Engine Multiple Remote Memory Corruption Vulnerabilities
2009-12-17 Zen Cart Insecure File and Programs Information Disclosure and Database Deletion Vulnerability
2009-12-17 Winamp Module Decoder Plugin Multiple Buffer Overflow Vulnerabilities
2009-12-17 Winamp JPEG and PNG Multiple Integer Overflow Vulnerabilities
2009-12-17 HP OpenView Storage Data Protector Stack Buffer Overflow Vulnerability
2009-12-17 IBM WebSphere Application Server Feature Pack for CEA Spoofing Vulnerability
2009-12-17 Digital Scribe Cross Site Scripting and SQL Injection Vulnerabilities
2009-12-17 WP-Forum WordPress Plugin Multiple SQL Injection Vulnerabilities
2009-12-17 Quick Heal AntiVirus Insecure Program File Permissions Local Privilege Escalation Vulnerability