CVE-2009-1373
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:S/C:C/I:C/A:C
AI Score
Confidence
High
EPSS
Percentile
92.3%
Buffer overflow in the XMPP SOCKS5 bytestream server in Pidgin (formerly Gaim) before 2.5.6 allows remote authenticated users to execute arbitrary code via vectors involving an outbound XMPP file transfer. NOTE: some of these details are obtained from third party information.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| pidgin | pidgin | 2.4.3 | cpe:/a:pidgin:pidgin:2.4.3::: |
| pidgin | pidgin | 2.0.0 | cpe:/a:pidgin:pidgin:2.0.0::: |
| pidgin | pidgin | 2.5.1 | cpe:/a:pidgin:pidgin:2.5.1::: |
| pidgin | pidgin | 2.4.1 | cpe:/a:pidgin:pidgin:2.4.1::: |
| pidgin | pidgin | 2.2.1 | cpe:/a:pidgin:pidgin:2.2.1::: |
| pidgin | pidgin | 2.5.4 | cpe:/a:pidgin:pidgin:2.5.4::: |
| pidgin | pidgin | 2.1.1 | cpe:/a:pidgin:pidgin:2.1.1::: |
| pidgin | pidgin | 2.3.1 | cpe:/a:pidgin:pidgin:2.3.1::: |
| pidgin | pidgin | 2.5.3 | cpe:/a:pidgin:pidgin:2.5.3::: |
| pidgin | pidgin | 2.4.0 | cpe:/a:pidgin:pidgin:2.4.0::: |
References
debian.org/security/2009/dsa-1805
secunia.com/advisories/35188
secunia.com/advisories/35194
secunia.com/advisories/35202
secunia.com/advisories/35215
secunia.com/advisories/35294
secunia.com/advisories/35329
secunia.com/advisories/35330
www.gentoo.org/security/en/glsa/glsa-200905-07.xml
www.mandriva.com/security/advisories?name=MDVSA-2009:140
www.mandriva.com/security/advisories?name=MDVSA-2009:173
www.pidgin.im/news/security/?id=29
www.redhat.com/support/errata/RHSA-2009-1059.html
www.redhat.com/support/errata/RHSA-2009-1060.html
www.securityfocus.com/bid/35067
www.ubuntu.com/usn/USN-781-1
www.ubuntu.com/usn/USN-781-2
www.vupen.com/english/advisories/2009/1396
bugzilla.redhat.com/show_bug.cgi?id=500488
exchange.xforce.ibmcloud.com/vulnerabilities/50682
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17722
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9005
www.redhat.com/archives/fedora-package-announce/2009-June/msg00033.html
www.redhat.com/archives/fedora-package-announce/2009-June/msg00051.html
www.redhat.com/archives/fedora-package-announce/2009-June/msg00075.html
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:S/C:C/I:C/A:C
AI Score
Confidence
High
EPSS
Percentile
92.3%