Oval Definition:	oval:org.mitre.oval:def:9005
Revision Date: 2013-04-29 Version: 12 Title: Buffer overflow in the XMPP SOCKS5 bytestream server in Pidgin (formerly Gaim) before 2.5.6 allows remote authenticated users to execute arbitrary code via vectors involving an outbound XMPP file transfer. NOTE: some of these details are obtained from third party information. Description: Buffer overflow in the XMPP SOCKS5 bytestream server in Pidgin (formerly Gaim) before 2.5.6 allows remote authenticated users to execute arbitrary code via vectors involving an outbound XMPP file transfer. NOTE: some of these details are obtained from third party information. Family: unix Class: vulnerability Status: ACCEPTED Reference(s): CVE-2009-1373 Platform(s): CentOS Linux 3 CentOS Linux 4 CentOS Linux 5 Oracle Linux 4 Oracle Linux 5 Red Hat Enterprise Linux 3 Red Hat Enterprise Linux 4 Red Hat Enterprise Linux 5 Product(s): Definition Synopsis OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 OR CentOS Linux 3.x AND pidgin is earlier than 0:1.5.1-3.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 OR CentOS Linux 4.x OR Oracle Linux 4.x AND Configuration section finch-devel is earlier than 0:2.5.5-2.el4 OR libpurple is earlier than 0:2.5.5-2.el4 OR libpurple-perl is earlier than 0:2.5.5-2.el4 OR libpurple-tcl is earlier than 0:2.5.5-2.el4 OR pidgin-devel is earlier than 0:2.5.5-2.el4 OR libpurple-devel is earlier than 0:2.5.5-2.el4 OR finch is earlier than 0:2.5.5-2.el4 OR pidgin-perl is earlier than 0:2.5.5-2.el4 OR pidgin is earlier than 0:2.5.5-2.el4 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 OR The operating system installed on the system is CentOS Linux 5.x OR Oracle Linux 5.x AND Configuration section finch-devel is earlier than 0:2.5.5-3.el5 OR libpurple is earlier than 0:2.5.5-3.el5 OR libpurple-perl is earlier than 0:2.5.5-3.el5 OR libpurple-tcl is earlier than 0:2.5.5-3.el5 OR pidgin-devel is earlier than 0:2.5.5-3.el5 OR libpurple-devel is earlier than 0:2.5.5-3.el5 OR finch is earlier than 0:2.5.5-3.el5 OR pidgin-perl is earlier than 0:2.5.5-3.el5 OR pidgin is earlier than 0:2.5.5-3.el5
BACK