ekg before 1:1.7~rc2-1etch1 on Debian GNU/Linux Etch allows remote attackers to cause a denial of service (NULL pointer dereference) via a vector related to the token OCR functionality.

Numerous bugfixes (including security), support for the latest GG protocol version.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Several remote vulnerabilities have been discovered in ekg, a console Gadu Gadu client. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2005-2370     It was discovered that memory alignment errors may allow     remote attackers to cause a denial of service on certain     architectures such as sparc. This only affects Debian     Sarge.

  - CVE-2005-2448     It was discovered that several endianess errors may     allow remote attackers to cause a denial of service.
    This only affects Debian Sarge.

  - CVE-2007-1663     It was discovered that a memory leak in handling image     messages may lead to denial of service. This only     affects Debian Etch.

  - CVE-2007-1664     It was discovered that a NULL pointer deference in the     token OCR code may lead to denial of service. This only     affects Debian Etch.

  - CVE-2007-1665     It was discovered that a memory leak in the token OCR     code may lead to denial of service. This only affects     Debian Etch.

The remote host seems to be running Gaim, a popular open-source, multi-protocol instant messenger. It is reported that this version of Gaim is vulnerable to several remote flaws.  An attacker exploiting these flaws would be able to create a Denial of Service (DoS) condition or possibly overflow system memory and execute arbitrary code.

ID	Name	Product	Family	Severity
27680	Fedora 7 : ekg-1.7-1.fc7 (2007-0791)	Nessus	Fedora Local Security Checks	medium
25584	Debian DSA-1318-1 : ekg - several vulnerabilities	Nessus	Debian Local Security Checks	medium
3160	Gaim < 1.3.2 Multiple Vulnerabilities	Nessus Network Monitor	Internet Messengers	medium

Detections

Analytics

CVE-2007-1664

high

Tenable Plugins

medium

medium

medium