Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2010-0013
HistoryJan 09, 2010 - 6:30 p.m.

CVE-2010-0013

2010-01-0918:30:01
CWE-22
[email protected]
web.nvd.nist.gov
37
cve
2010
0013
directory traversal
vulnerability
libpurple
pidgin
adium
msn protocol
remote attackers

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.5 High

AI Score

Confidence

High

0.072 Low

EPSS

Percentile

94.1%

JSON

Directory traversal vulnerability in slp.c in the MSN protocol plugin in libpurple in Pidgin 2.6.4 and Adium 1.3.8 allows remote attackers to read arbitrary files via a … (dot dot) in an application/x-msnmsgrp2p MSN emoticon (aka custom smiley) request, a related issue to CVE-2004-0122. NOTE: it could be argued that this is resultant from a vulnerability in which an emoticon download request is processed even without a preceding text/x-mms-emoticon message that announced availability of the emoticon.

Affected configurations

NVD
Node
adiumadiumMatch1.3.8
OR
pidginpidginMatch2.6.4
Node
fedoraprojectfedoraMatch11
OR
fedoraprojectfedoraMatch12
Node
opensuseopensuseRange11.0–11.2
OR
suselinux_enterpriseMatch11.0-
OR
suselinux_enterprise_serverMatch10sp2-
OR
suselinux_enterprise_serverMatch10sp3-
Node
redhatenterprise_linuxMatch4.0
OR
redhatenterprise_linuxMatch5.0

References

Related

ubuntucve 2
openvas 43
nvd 3
cvelist 3
securityvulns 3
nessus 26
prion 2
debiancve 2
centos 1
fedora 8
seebug 1
debian 4
packetstorm 1
exploitpack 1
redhat 1
veracode 1
oraclelinux 1
slackware 1
exploitdb 1
cve 2
gentoo 1
cert 1
altlinux 1
ubuntu 1
ubuntucve
ubuntucve
CVE-2010-0013
2010-01-09 00:00:00
CVE-2010-0277
2010-01-09 00:00:00
openvas
openvas
Mandriva Update for pidgin MDVSA-2010:002 (pidgin)
2010-01-15 00:00:00
Mandriva Update for pidgin MDVSA-2010:002 (pidgin)
2010-01-15 00:00:00
Mandriva Update for pidgin MDVSA-2010:001 (pidgin)
2010-01-15 00:00:00
nvd
nvd
CVE-2010-0013
2010-01-09 18:30:01
CVE-2010-0277
2010-01-09 18:30:01
CVE-2004-0122
2004-04-15 04:00:00
cvelist
cvelist
CVE-2010-0013
2010-01-09 18:00:00
CVE-2010-0277
2010-01-09 18:00:00
CVE-2004-0122
2004-09-01 04:00:00
securityvulns
securityvulns
[ MDVSA-2010:002 ] pidgin
2010-01-13 00:00:00
libpurple / Pidgin / Adium directory traversal
2010-01-13 00:00:00
Microsoft Security Bulletin MS04-010
2004-03-10 00:00:00
nessus
nessus
Mandriva Linux Security Advisory : pidgin (MDVSA-2010:002)
2010-07-30 00:00:00
Mandriva Linux Security Advisory : pidgin (MDVSA-2010:001)
2010-01-12 00:00:00
Scientific Linux Security Update : pidgin on SL4.x, SL5.x i386/x86_64
2012-08-01 00:00:00
prion
prion
Directory traversal
2010-01-09 18:30:00
Memory corruption
2010-01-09 18:30:00
debiancve
debiancve
CVE-2010-0013
2010-01-09 18:30:01
CVE-2010-0277
2010-01-09 18:30:01
centos
centos
finch, libpurple, pidgin security update
2010-01-14 21:33:39
fedora
fedora
[SECURITY] Fedora 12 Update: pidgin-2.6.5-1.fc12
2010-01-12 20:39:30
[SECURITY] Fedora 12 Update: pidgin-2.6.6-1.fc12
2010-02-20 00:26:26
[SECURITY] Fedora 12 Update: pidgin-2.7.0-2.fc12
2010-05-24 19:48:53
seebug
seebug
Pidgin MSN <= 2.6.4 File Download Vulnerability
2014-07-01 00:00:00
debian
debian
[Backports-security-announce] Security Update for pidgin
2010-01-29 07:06:11
[Backports-security-announce] Security Update for pidgin
2010-01-29 07:16:12
[Backports-security-announce] Security Update for pidgin
2010-02-18 22:17:54
packetstorm
packetstorm
Pidgin MSN 2.6.4 File Download
2010-01-20 00:00:00
exploitpack
exploitpack
Pidgin MSN 2.6.4 - File Download
2010-01-19 00:00:00
redhat
redhat
(RHSA-2010:0044) Important: pidgin security update
2010-01-14 00:00:00
veracode
veracode
Directory Traversal
2020-04-10 00:43:30
oraclelinux
oraclelinux
pidgin security update
2010-01-14 00:00:00
slackware
slackware
[slackware-security] pidgin
2010-01-25 05:20:22
exploitdb
exploitdb
Pidgin MSN 2.6.4 - File Download
2010-01-19 00:00:00
cve
cve
CVE-2010-0277
2010-01-09 18:30:01
CVE-2004-0122
2004-09-01 04:00:00
gentoo
gentoo
Pidgin: Multiple vulnerabilities
2012-06-21 00:00:00
cert
cert
Microsoft MSN Messenger fails to properly validate file requests
2004-03-10 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 5 package pidgin-mini version 2.7.1-alt1
2010-06-13 00:00:00
ubuntu
ubuntu
Pidgin vulnerabilities
2010-01-18 00:00:00

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.5 High

AI Score

Confidence

High

0.072 Low

EPSS

Percentile

94.1%

JSON
Related for CVE-2010-0013
ubuntucve2openvas43nvd3cvelist3securityvulns3nessus26prion2debiancve2centos1fedora8seebug1debian4packetstorm1exploitpack1redhat1veracode1oraclelinux1slackware1exploitdb1cve2gentoo1cert1altlinux1ubuntu1