exploits , vulnerabilities , articles , Gaim Remote URI Handling Buffer Overflow Vulnerability

Title	Gaim Remote URI Handling Buffer Overflow Vulnerability
Published	2005-05-11-12:00AM
Updated	2005-06-10-08:36PM
Class	Boundary Condition Error
CVE	CAN-2005-1261
Remote	Yes
Local	No
Credit	Stu Tomlinson is credited with the discovery of this vulnerability.
Vulnerable	Ubuntu Ubuntu Linux 5.0 4 powerpc Ubuntu Ubuntu Linux 5.0 4 i386 Ubuntu Ubuntu Linux 5.0 4 amd64 Ubuntu Ubuntu Linux 4.1 ppc Ubuntu Ubuntu Linux 4.1 ia64 Ubuntu Ubuntu Linux 4.1 ia32 SGI ProPack 3.0 S.u.S.E. SuSE Linux School Server for i386 S.u.S.E. SuSE eMail Server III S.u.S.E. SuSE eMail Server 3.1 S.u.S.E. OpenEnterpriseServer 9.0 S.u.S.E. Novell Linux Desktop 9.0 S.u.S.E. Linux Professional 8.2 S.u.S.E. Linux Professional 7.3 S.u.S.E. Linux Personal 9.3 x86_64 S.u.S.E. Linux Personal 9.3 S.u.S.E. Linux Personal 9.2 x86_64 S.u.S.E. Linux Personal 9.2 S.u.S.E. Linux Personal 9.1 x86_64 S.u.S.E. Linux Personal 9.1 S.u.S.E. Linux Personal 9.0 x86_64 S.u.S.E. Linux Personal 9.0 S.u.S.E. Linux Personal 8.2 S.u.S.E. Linux Openexchange Server S.u.S.E. Linux Office Server S.u.S.E. Linux IMAP Server 1.0 S.u.S.E. Linux Enterprise Server for S/390 9.0 S.u.S.E. Linux Enterprise Server for S/390 S.u.S.E. Linux Enterprise Server 9 S.u.S.E. Linux Enterprise Server 8 S.u.S.E. Linux Enterprise Server 7 S.u.S.E. Linux Desktop 1.0 S.u.S.E. Linux Database Server S.u.S.E. Linux Connectivity Server S.u.S.E. Linux 8.1 S.u.S.E. Linux 8.0 i386 S.u.S.E. Linux 8.0 S.u.S.E. Linux 7.3 sparc S.u.S.E. Linux 7.3 ppc S.u.S.E. Linux 7.3 i386 S.u.S.E. Linux 7.3 S.u.S.E. Linux 7.2 i386 S.u.S.E. Linux 7.2 S.u.S.E. Linux 7.1 x86 S.u.S.E. Linux 7.1 sparc S.u.S.E. Linux 7.1 ppc S.u.S.E. Linux 7.1 alpha S.u.S.E. Linux 7.1 S.u.S.E. Linux 7.0 sparc S.u.S.E. Linux 7.0 ppc S.u.S.E. Linux 7.0 i386 S.u.S.E. Linux 7.0 alpha S.u.S.E. Linux 7.0 S.u.S.E. Linux 6.4 ppc S.u.S.E. Linux 6.4 i386 S.u.S.E. Linux 6.4 alpha S.u.S.E. Linux 6.4 S.u.S.E. Linux 6.3 ppc S.u.S.E. Linux 6.3 alpha S.u.S.E. Linux 6.3 S.u.S.E. Linux 6.2 S.u.S.E. Linux 6.1 alpha S.u.S.E. Linux 6.1 S.u.S.E. Linux 6.0 S.u.S.E. Linux 5.3 S.u.S.E. Linux 5.2 S.u.S.E. Linux 5.1 S.u.S.E. Linux 5.0 S.u.S.E. Linux 4.4.1 S.u.S.E. Linux 4.4 S.u.S.E. Linux 4.3 S.u.S.E. Linux 4.2 S.u.S.E. Linux 4.0 S.u.S.E. Linux 3.0 S.u.S.E. Linux 2.0 S.u.S.E. Linux 1.0 Rob Flynn Gaim 1.2.1 Rob Flynn Gaim 1.2 Rob Flynn Gaim 1.1.4 Conectiva Linux 4.1 Conectiva Linux 9.0 Conectiva Linux 10.0 Gentoo Linux MandrakeSoft Corporate Server 3.0 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Linux Mandrake 10.1 MandrakeSoft Linux Mandrake 10.1 x86_64 Ubuntu Ubuntu Linux 5.0 4 amd64 Ubuntu Ubuntu Linux 5.0 4 i386 Ubuntu Ubuntu Linux 5.0 4 powerpc Rob Flynn Gaim 1.1.3 RedHat Fedora Core2 RedHat Fedora Core3 Rob Flynn Gaim 1.1.2 Rob Flynn Gaim 1.1.1 Rob Flynn Gaim 1.0.2 Gentoo Linux Slackware Linux current Slackware Linux 9.0 Slackware Linux 9.1 Slackware Linux 10.0 Rob Flynn Gaim 1.0.1 Rob Flynn Gaim 1.0 Rob Flynn Gaim 0.82.1 Rob Flynn Gaim 0.82 MandrakeSoft Linux Mandrake 10.1 MandrakeSoft Linux Mandrake 10.1 x86_64 RedHat Linux 7.3 RedHat Linux 7.3 i386 RedHat Linux 9.0 i386 Rob Flynn Gaim 0.78 Rob Flynn Gaim 0.75 Rob Flynn Gaim 0.74 Rob Flynn Gaim 0.73 Rob Flynn Gaim 0.72 Rob Flynn Gaim 0.71 RedHat Fedora Core1 Rob Flynn Gaim 0.70 Rob Flynn Gaim 0.69 Rob Flynn Gaim 0.68 Rob Flynn Gaim 0.67 Rob Flynn Gaim 0.66 Rob Flynn Gaim 0.65 Rob Flynn Gaim 0.64 Rob Flynn Gaim 0.63 Rob Flynn Gaim 0.62 Rob Flynn Gaim 0.61 Rob Flynn Gaim 0.60 Rob Flynn Gaim 0.59.1 MandrakeSoft Corporate Server 1.0.1 MandrakeSoft Linux Mandrake 7.1 MandrakeSoft Linux Mandrake 7.2 MandrakeSoft Linux Mandrake 8.0 MandrakeSoft Linux Mandrake 8.0 ppc MandrakeSoft Linux Mandrake 8.1 MandrakeSoft Linux Mandrake 8.1 ia64 MandrakeSoft Linux Mandrake 8.2 MandrakeSoft Linux Mandrake 8.2 ppc RedHat Linux 7.1 alpha RedHat Linux 7.1 i386 RedHat Linux 7.2 i386 RedHat Linux 7.2 ia64 RedHat Linux 7.3 RedHat Linux 7.3 i386 Rob Flynn Gaim 0.59 Gentoo Linux 0.5 Gentoo Linux 0.7 HP Secure OS software for Linux 1.0 RedHat Linux 7.1 RedHat Linux 7.1 alpha RedHat Linux 7.1 i386 RedHat Linux 7.1 ia64 RedHat Linux 7.2 RedHat Linux 7.2 i386 RedHat Linux 7.2 ia64 RedHat Linux 7.3 RedHat Linux 7.3 i386 RedHat Linux 9.0 i386 S.u.S.E. Linux 8.1 S.u.S.E. Linux Personal 8.2 Sun Linux 5.0 Rob Flynn Gaim 0.58 Rob Flynn Gaim 0.57 Rob Flynn Gaim 0.56 Rob Flynn Gaim 0.55 Rob Flynn Gaim 0.54 Rob Flynn Gaim 0.53 Rob Flynn Gaim 0.52 Rob Flynn Gaim 0.51 MandrakeSoft Corporate Server 1.0.1 MandrakeSoft Linux Mandrake 7.1 MandrakeSoft Linux Mandrake 7.2 MandrakeSoft Linux Mandrake 8.0 MandrakeSoft Linux Mandrake 8.0 ppc MandrakeSoft Linux Mandrake 8.1 MandrakeSoft Linux Mandrake 8.1 ia64 MandrakeSoft Linux Mandrake 8.2 MandrakeSoft Linux Mandrake 8.2 ppc Rob Flynn Gaim 0.50 S.u.S.E. Linux 8.0 Rob Flynn Gaim 0.10.3 Rob Flynn Gaim 0.10 x MandrakeSoft Linux Mandrake 10.2 x86_64 MandrakeSoft Linux Mandrake 10.2 Conectiva Linux 10.0 Conectiva Linux 9.0
Not Vulnerable	Rob Flynn Gaim 1.3 .0
Code	The following denial of service proof of concept is available: /data/vulnerabilities/exploits/vuln-plugin.so
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-17 Mozilla Firefox and SeaMonkey Theora Video Library Remote Integer Overflow Vulnerability
2009-12-17 Mozilla Firefox and Sea Monkey Insecure Protocol Location Bar Spoofing Vulnerability
2009-12-17 Mozilla Firefox and Sea Monkey Content Injection Spoofing Vulnerability
2009-12-17 Mozilla Firefox/SeaMonkey GeckoActiveXObject Exception Message COM Object Enumeration Vulnerability
2009-12-16 ZABBIX Denial Of Service and SQL Injection Vulnerabilities
2009-12-16 IBM WebSphere Application Server JNDI Remote Information Disclosure Vulnerability
2009-12-16 Horde Application Framework Administration Interface Cross-Site Scripting Vulnerability
2009-12-16 Mozilla Firefox and SeaMonkey MFSA 2009-65 through -71 Multiple Vulnerabilities
2009-12-16 Merkaartor Insecure Temporary File Creation Vulnerability
2009-12-15 TYPO3 Watchdog (aba_watchdog) Unspecified Information Disclosure Vulnerability