FreeBSD : gaim -- remote crash on some protocols (889061af-c427-11d9-ac59-02061b08fc24)

high Nessus Plugin ID 19017

Synopsis

The remote FreeBSD host is missing one or more security-related updates.

Description

The GAIM team reports that GAIM is vulnerable to a denial-of-service vulnerability which can cause GAIM to crash :

It is possible for a remote user to overflow a static buffer by sending an IM containing a very large URL (greater than 8192 bytes) to the Gaim user. This is not possible on all protocols, due to message length restrictions. Jabber are SILC are known to be vulnerable.

Solution

Update the affected packages.

Plugin Details

Severity: High

ID: 19017

File Name: freebsd_pkg_889061afc42711d9ac5902061b08fc24.nasl

Version: 1.15

Type: local

Family: FreeBSD Local Security Checks

Published: 7/13/2005

Updated: 1/6/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: High

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Information

CPE: p-cpe:/a:freebsd:freebsd:gaim, p-cpe:/a:freebsd:freebsd:ja-gaim, p-cpe:/a:freebsd:freebsd:ko-gaim, p-cpe:/a:freebsd:freebsd:ru-gaim, cpe:/o:freebsd:freebsd

Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info

Patch Publication Date: 5/14/2005

Vulnerability Publication Date: 5/10/2005

Reference Information

CVE: CVE-2005-1261

Detections

Analytics