Gaim Buffer Overflows in Processing MSN Protocol May Let Remote Users Execute Arbitrary Code
|
|
SecurityTracker Alert ID: 1010872 |
|
SecurityTracker URL: http://securitytracker.com/id/1010872
|
|
CVE Reference:
CAN-2004-0500
(Links to External Site)
|
Date: Aug 5 2004
|
Impact:
Execution of arbitrary code via network
|
|
|
Description:
Some vulnerabilities were reported in Gaim in the processing of the MSN protocol. A remote user may be able to execute arbitrary code on the target system.
SuSE reported that the SuSE Security Team discovered several remotely exploitable buffer overflows in the MSN protocol parsing functions. No further details were provided.
|
Impact:
A remote user may be able to execute arbitrary code on the target system.
|
Solution:
No upstream solution was available at the time of this entry.
|
Vendor URL: gaim.sourceforge.net/ (Links to External Site)
|
Cause:
Boundary error
|
Underlying OS:
Linux (Any), UNIX (Any)
|
|
Message History:
This archive entry has one or more follow-up message(s) listed below.
|
Source Message Contents
|
Date: Wed, 04 Aug 2004 11:47:48 -0400
Subject: CAN-2004-0500
|
SuSE reported that the SuSE Security Team discovered several remotely exploitable buffer
overflows in the MSN-protocol parsing functions of gaim.
This affects SuSE Linux 9.1.
[Editor's note: This may affect other Linux distributions.]
|
|
