Vulnerabilities > CVE-2009-2703 - Buffer Errors vulnerability in Pidgin Libpurple and Pidgin

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
PARTIAL
network
low complexity
pidgin
CWE-119
nessus

Summary

libpurple/protocols/irc/msgs.c in the IRC protocol plugin in libpurple in Pidgin before 2.6.2 allows remote IRC servers to cause a denial of service (NULL pointer dereference and application crash) via a TOPIC message that lacks a topic string.

Common Attack Pattern Enumeration and Classification (CAPEC)

  • Buffer Overflow via Environment Variables
    This attack pattern involves causing a buffer overflow through manipulation of environment variables. Once the attacker finds that they can modify an environment variable, they may try to overflow associated buffers. This attack leverages implicit trust often placed in environment variables.
  • Overflow Buffers
    Buffer Overflow attacks target improper or missing bounds checking on buffer operations, typically triggered by input injected by an attacker. As a consequence, an attacker is able to write past the boundaries of allocated buffer regions in memory, causing a program crash or potentially redirection of execution as per the attackers' choice.
  • Client-side Injection-induced Buffer Overflow
    This type of attack exploits a buffer overflow vulnerability in targeted client software through injection of malicious content from a custom-built hostile service.
  • Filter Failure through Buffer Overflow
    In this attack, the idea is to cause an active filter to fail by causing an oversized transaction. An attacker may try to feed overly long input strings to the program in an attempt to overwhelm the filter (by causing a buffer overflow) and hoping that the filter does not fail securely (i.e. the user input is let into the system unfiltered).
  • MIME Conversion
    An attacker exploits a weakness in the MIME conversion routine to cause a buffer overflow and gain control over the mail server machine. The MIME system is designed to allow various different information formats to be interpreted and sent via e-mail. Attack points exist when data are converted to MIME compatible format and back.

Nessus

  • NASL familyCentOS Local Security Checks
    NASL idCENTOS_RHSA-2009-1535.NASL
    descriptionAn updated pidgin package that fixes several security issues is now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. An invalid pointer dereference bug was found in the way the Pidgin OSCAR protocol implementation processed lists of contacts. A remote attacker could send a specially crafted contact list to a user running Pidgin, causing Pidgin to crash. (CVE-2009-3615) A NULL pointer dereference flaw was found in the way the Pidgin IRC protocol plug-in handles IRC topics. A malicious IRC server could send a specially crafted IRC TOPIC message, which once received by Pidgin, would lead to a denial of service (Pidgin crash). (CVE-2009-2703) A NULL pointer dereference flaw was found in the way the Pidgin MSN protocol plug-in handles improper MSNSLP invitations. A remote attacker could send a specially crafted MSNSLP invitation request, which once accepted by a valid Pidgin user, would lead to a denial of service (Pidgin crash). (CVE-2009-3083) All Pidgin users should upgrade to this updated package, which contains backported patches to resolve these issues. Pidgin must be restarted for this update to take effect.
    last seen2020-06-01
    modified2020-06-02
    plugin id42309
    published2009-10-30
    reporterThis script is Copyright (C) 2009-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/42309
    titleCentOS 3 : pidgin (CESA-2009:1535)
    code
    #%NASL_MIN_LEVEL 80502
    #
    # (C) Tenable Network Security, Inc.
    #
    # The descriptive text and package checks in this plugin were  
    # extracted from Red Hat Security Advisory RHSA-2009:1535 and 
    # CentOS Errata and Security Advisory 2009:1535 respectively.
    #
    
    include("compat.inc");
    
    if (description)
    {
      script_id(42309);
      script_version("1.15");
      script_cvs_date("Date: 2019/10/25 13:36:05");
    
      script_cve_id("CVE-2009-2703", "CVE-2009-3083", "CVE-2009-3615");
      script_bugtraq_id(36277);
      script_xref(name:"RHSA", value:"2009:1535");
    
      script_name(english:"CentOS 3 : pidgin (CESA-2009:1535)");
      script_summary(english:"Checks rpm output for the updated package");
    
      script_set_attribute(
        attribute:"synopsis", 
        value:"The remote CentOS host is missing a security update."
      );
      script_set_attribute(
        attribute:"description", 
        value:
    "An updated pidgin package that fixes several security issues is now
    available for Red Hat Enterprise Linux 3.
    
    This update has been rated as having moderate security impact by the
    Red Hat Security Response Team.
    
    Pidgin is an instant messaging program which can log in to multiple
    accounts on multiple instant messaging networks simultaneously.
    
    An invalid pointer dereference bug was found in the way the Pidgin
    OSCAR protocol implementation processed lists of contacts. A remote
    attacker could send a specially crafted contact list to a user running
    Pidgin, causing Pidgin to crash. (CVE-2009-3615)
    
    A NULL pointer dereference flaw was found in the way the Pidgin IRC
    protocol plug-in handles IRC topics. A malicious IRC server could send
    a specially crafted IRC TOPIC message, which once received by Pidgin,
    would lead to a denial of service (Pidgin crash). (CVE-2009-2703)
    
    A NULL pointer dereference flaw was found in the way the Pidgin MSN
    protocol plug-in handles improper MSNSLP invitations. A remote
    attacker could send a specially crafted MSNSLP invitation request,
    which once accepted by a valid Pidgin user, would lead to a denial of
    service (Pidgin crash). (CVE-2009-3083)
    
    All Pidgin users should upgrade to this updated package, which
    contains backported patches to resolve these issues. Pidgin must be
    restarted for this update to take effect."
      );
      # https://lists.centos.org/pipermail/centos-announce/2009-October/016208.html
      script_set_attribute(
        attribute:"see_also",
        value:"http://www.nessus.org/u?5649c188"
      );
      # https://lists.centos.org/pipermail/centos-announce/2009-October/016209.html
      script_set_attribute(
        attribute:"see_also",
        value:"http://www.nessus.org/u?6a32cb83"
      );
      script_set_attribute(
        attribute:"solution", 
        value:"Update the affected pidgin package."
      );
      script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P");
      script_set_cvss_temporal_vector("CVSS2#E:ND/RL:OF/RC:C");
      script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
      script_set_attribute(attribute:"exploit_available", value:"false");
      script_cwe_id(119, 399);
    
      script_set_attribute(attribute:"plugin_type", value:"local");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:pidgin");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:centos:centos:3");
    
      script_set_attribute(attribute:"vuln_publication_date", value:"2009/09/08");
      script_set_attribute(attribute:"patch_publication_date", value:"2009/10/29");
      script_set_attribute(attribute:"plugin_publication_date", value:"2009/10/30");
      script_set_attribute(attribute:"generated_plugin", value:"current");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_copyright(english:"This script is Copyright (C) 2009-2019 and is owned by Tenable, Inc. or an Affiliate thereof.");
      script_family(english:"CentOS Local Security Checks");
    
      script_dependencies("ssh_get_info.nasl");
      script_require_keys("Host/local_checks_enabled", "Host/CentOS/release", "Host/CentOS/rpm-list");
    
      exit(0);
    }
    
    
    include("audit.inc");
    include("global_settings.inc");
    include("rpm.inc");
    
    
    if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
    release = get_kb_item("Host/CentOS/release");
    if (isnull(release) || "CentOS" >!< release) audit(AUDIT_OS_NOT, "CentOS");
    os_ver = pregmatch(pattern: "CentOS(?: Linux)? release ([0-9]+)", string:release);
    if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "CentOS");
    os_ver = os_ver[1];
    if (! preg(pattern:"^3([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "CentOS 3.x", "CentOS " + os_ver);
    
    if (!get_kb_item("Host/CentOS/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
    
    
    cpu = get_kb_item("Host/cpu");
    if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
    if ("x86_64" >!< cpu && "ia64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "CentOS", cpu);
    
    
    flag = 0;
    if (rpm_check(release:"CentOS-3", cpu:"i386", reference:"pidgin-1.5.1-6.el3")) flag++;
    if (rpm_check(release:"CentOS-3", cpu:"x86_64", reference:"pidgin-1.5.1-6.el3")) flag++;
    
    
    if (flag)
    {
      security_report_v4(
        port       : 0,
        severity   : SECURITY_WARNING,
        extra      : rpm_report_get()
      );
      exit(0);
    }
    else
    {
      tested = pkg_tests_get();
      if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
      else audit(AUDIT_PACKAGE_NOT_INSTALLED, "pidgin");
    }
    
  • NASL familyOracle Linux Local Security Checks
    NASL idORACLELINUX_ELSA-2009-1535.NASL
    descriptionFrom Red Hat Security Advisory 2009:1535 : An updated pidgin package that fixes several security issues is now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. An invalid pointer dereference bug was found in the way the Pidgin OSCAR protocol implementation processed lists of contacts. A remote attacker could send a specially crafted contact list to a user running Pidgin, causing Pidgin to crash. (CVE-2009-3615) A NULL pointer dereference flaw was found in the way the Pidgin IRC protocol plug-in handles IRC topics. A malicious IRC server could send a specially crafted IRC TOPIC message, which once received by Pidgin, would lead to a denial of service (Pidgin crash). (CVE-2009-2703) A NULL pointer dereference flaw was found in the way the Pidgin MSN protocol plug-in handles improper MSNSLP invitations. A remote attacker could send a specially crafted MSNSLP invitation request, which once accepted by a valid Pidgin user, would lead to a denial of service (Pidgin crash). (CVE-2009-3083) All Pidgin users should upgrade to this updated package, which contains backported patches to resolve these issues. Pidgin must be restarted for this update to take effect.
    last seen2020-06-01
    modified2020-06-02
    plugin id67950
    published2013-07-12
    reporterThis script is Copyright (C) 2013-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/67950
    titleOracle Linux 3 : pidgin (ELSA-2009-1535)
    code
    #%NASL_MIN_LEVEL 80502
    #
    # (C) Tenable Network Security, Inc.
    #
    # The descriptive text and package checks in this plugin were
    # extracted from Red Hat Security Advisory RHSA-2009:1535 and 
    # Oracle Linux Security Advisory ELSA-2009-1535 respectively.
    #
    
    include("compat.inc");
    
    if (description)
    {
      script_id(67950);
      script_version("1.9");
      script_cvs_date("Date: 2019/10/25 13:36:08");
    
      script_cve_id("CVE-2009-2703", "CVE-2009-3083", "CVE-2009-3615");
      script_bugtraq_id(36277);
      script_xref(name:"RHSA", value:"2009:1535");
    
      script_name(english:"Oracle Linux 3 : pidgin (ELSA-2009-1535)");
      script_summary(english:"Checks rpm output for the updated package");
    
      script_set_attribute(
        attribute:"synopsis", 
        value:"The remote Oracle Linux host is missing a security update."
      );
      script_set_attribute(
        attribute:"description", 
        value:
    "From Red Hat Security Advisory 2009:1535 :
    
    An updated pidgin package that fixes several security issues is now
    available for Red Hat Enterprise Linux 3.
    
    This update has been rated as having moderate security impact by the
    Red Hat Security Response Team.
    
    Pidgin is an instant messaging program which can log in to multiple
    accounts on multiple instant messaging networks simultaneously.
    
    An invalid pointer dereference bug was found in the way the Pidgin
    OSCAR protocol implementation processed lists of contacts. A remote
    attacker could send a specially crafted contact list to a user running
    Pidgin, causing Pidgin to crash. (CVE-2009-3615)
    
    A NULL pointer dereference flaw was found in the way the Pidgin IRC
    protocol plug-in handles IRC topics. A malicious IRC server could send
    a specially crafted IRC TOPIC message, which once received by Pidgin,
    would lead to a denial of service (Pidgin crash). (CVE-2009-2703)
    
    A NULL pointer dereference flaw was found in the way the Pidgin MSN
    protocol plug-in handles improper MSNSLP invitations. A remote
    attacker could send a specially crafted MSNSLP invitation request,
    which once accepted by a valid Pidgin user, would lead to a denial of
    service (Pidgin crash). (CVE-2009-3083)
    
    All Pidgin users should upgrade to this updated package, which
    contains backported patches to resolve these issues. Pidgin must be
    restarted for this update to take effect."
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://oss.oracle.com/pipermail/el-errata/2009-October/001226.html"
      );
      script_set_attribute(
        attribute:"solution", 
        value:"Update the affected pidgin package."
      );
      script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P");
      script_set_cvss_temporal_vector("CVSS2#E:ND/RL:OF/RC:C");
      script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
      script_set_attribute(attribute:"exploit_available", value:"false");
      script_cwe_id(119, 399);
    
      script_set_attribute(attribute:"plugin_type", value:"local");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:pidgin");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:oracle:linux:3");
    
      script_set_attribute(attribute:"vuln_publication_date", value:"2009/09/08");
      script_set_attribute(attribute:"patch_publication_date", value:"2009/10/29");
      script_set_attribute(attribute:"plugin_publication_date", value:"2013/07/12");
      script_set_attribute(attribute:"generated_plugin", value:"current");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_copyright(english:"This script is Copyright (C) 2013-2019 and is owned by Tenable, Inc. or an Affiliate thereof.");
      script_family(english:"Oracle Linux Local Security Checks");
    
      script_dependencies("ssh_get_info.nasl");
      script_require_keys("Host/local_checks_enabled", "Host/OracleLinux", "Host/RedHat/release", "Host/RedHat/rpm-list");
    
      exit(0);
    }
    
    
    include("audit.inc");
    include("global_settings.inc");
    include("rpm.inc");
    
    
    if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
    if (!get_kb_item("Host/OracleLinux")) audit(AUDIT_OS_NOT, "Oracle Linux");
    release = get_kb_item("Host/RedHat/release");
    if (isnull(release) || !pregmatch(pattern: "Oracle (?:Linux Server|Enterprise Linux)", string:release)) audit(AUDIT_OS_NOT, "Oracle Linux");
    os_ver = pregmatch(pattern: "Oracle (?:Linux Server|Enterprise Linux) .*release ([0-9]+(\.[0-9]+)?)", string:release);
    if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Oracle Linux");
    os_ver = os_ver[1];
    if (! preg(pattern:"^3([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Oracle Linux 3", "Oracle Linux " + os_ver);
    
    if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
    
    cpu = get_kb_item("Host/cpu");
    if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
    if ("x86_64" >!< cpu && "ia64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Oracle Linux", cpu);
    
    flag = 0;
    if (rpm_check(release:"EL3", cpu:"i386", reference:"pidgin-1.5.1-6.el3")) flag++;
    if (rpm_check(release:"EL3", cpu:"x86_64", reference:"pidgin-1.5.1-6.el3")) flag++;
    
    
    if (flag)
    {
      if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());
      else security_warning(0);
      exit(0);
    }
    else
    {
      tested = pkg_tests_get();
      if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
      else audit(AUDIT_PACKAGE_NOT_INSTALLED, "pidgin");
    }
    
  • NASL familyOracle Linux Local Security Checks
    NASL idORACLELINUX_ELSA-2009-1453.NASL
    descriptionFrom Red Hat Security Advisory 2009:1453 : Updated pidgin packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. Info/Query (IQ) is an Extensible Messaging and Presence Protocol (XMPP) specific request-response mechanism. A NULL pointer dereference flaw was found in the way the Pidgin XMPP protocol plug-in processes IQ error responses when trying to fetch a custom smiley. A remote client could send a specially crafted IQ error response that would crash Pidgin. (CVE-2009-3085) A NULL pointer dereference flaw was found in the way the Pidgin IRC protocol plug-in handles IRC topics. A malicious IRC server could send a specially crafted IRC TOPIC message, which once received by Pidgin, would lead to a denial of service (Pidgin crash). (CVE-2009-2703) It was discovered that, when connecting to certain, very old Jabber servers via XMPP, Pidgin may ignore the
    last seen2020-06-01
    modified2020-06-02
    plugin id67928
    published2013-07-12
    reporterThis script is Copyright (C) 2013-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/67928
    titleOracle Linux 4 : pidgin (ELSA-2009-1453)
    code
    #%NASL_MIN_LEVEL 80502
    #
    # (C) Tenable Network Security, Inc.
    #
    # The descriptive text and package checks in this plugin were
    # extracted from Red Hat Security Advisory RHSA-2009:1453 and 
    # Oracle Linux Security Advisory ELSA-2009-1453 respectively.
    #
    
    include("compat.inc");
    
    if (description)
    {
      script_id(67928);
      script_version("1.9");
      script_cvs_date("Date: 2019/10/25 13:36:08");
    
      script_cve_id("CVE-2009-2703", "CVE-2009-3026", "CVE-2009-3083", "CVE-2009-3085");
      script_bugtraq_id(36277);
      script_xref(name:"RHSA", value:"2009:1453");
    
      script_name(english:"Oracle Linux 4 : pidgin (ELSA-2009-1453)");
      script_summary(english:"Checks rpm output for the updated packages");
    
      script_set_attribute(
        attribute:"synopsis", 
        value:"The remote Oracle Linux host is missing one or more security updates."
      );
      script_set_attribute(
        attribute:"description", 
        value:
    "From Red Hat Security Advisory 2009:1453 :
    
    Updated pidgin packages that fix several security issues are now
    available for Red Hat Enterprise Linux 4 and 5.
    
    This update has been rated as having moderate security impact by the
    Red Hat Security Response Team.
    
    Pidgin is an instant messaging program which can log in to multiple
    accounts on multiple instant messaging networks simultaneously.
    Info/Query (IQ) is an Extensible Messaging and Presence Protocol
    (XMPP) specific request-response mechanism.
    
    A NULL pointer dereference flaw was found in the way the Pidgin XMPP
    protocol plug-in processes IQ error responses when trying to fetch a
    custom smiley. A remote client could send a specially crafted IQ error
    response that would crash Pidgin. (CVE-2009-3085)
    
    A NULL pointer dereference flaw was found in the way the Pidgin IRC
    protocol plug-in handles IRC topics. A malicious IRC server could send
    a specially crafted IRC TOPIC message, which once received by Pidgin,
    would lead to a denial of service (Pidgin crash). (CVE-2009-2703)
    
    It was discovered that, when connecting to certain, very old Jabber
    servers via XMPP, Pidgin may ignore the 'Require SSL/TLS' setting. In
    these situations, a non-encrypted connection is established rather
    than the connection failing, causing the user to believe they are
    using an encrypted connection when they are not, leading to sensitive
    information disclosure (session sniffing). (CVE-2009-3026)
    
    A NULL pointer dereference flaw was found in the way the Pidgin MSN
    protocol plug-in handles improper MSNSLP invitations. A remote
    attacker could send a specially crafted MSNSLP invitation request,
    which once accepted by a valid Pidgin user, would lead to a denial of
    service (Pidgin crash). (CVE-2009-3083)
    
    These packages upgrade Pidgin to version 2.6.2. Refer to the Pidgin
    release notes for a full list of changes:
    http://developer.pidgin.im/wiki/ChangeLog
    
    All Pidgin users should upgrade to these updated packages, which
    correct these issues. Pidgin must be restarted for this update to take
    effect."
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://oss.oracle.com/pipermail/el-errata/2009-September/001159.html"
      );
      script_set_attribute(
        attribute:"solution", 
        value:"Update the affected pidgin packages."
      );
      script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P");
      script_set_cvss_temporal_vector("CVSS2#E:ND/RL:OF/RC:C");
      script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
      script_set_attribute(attribute:"exploit_available", value:"false");
      script_cwe_id(119, 310);
    
      script_set_attribute(attribute:"plugin_type", value:"local");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:finch");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:finch-devel");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libpurple");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libpurple-devel");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libpurple-perl");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libpurple-tcl");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:pidgin");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:pidgin-devel");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:pidgin-perl");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:oracle:linux:4");
    
      script_set_attribute(attribute:"vuln_publication_date", value:"2009/08/31");
      script_set_attribute(attribute:"patch_publication_date", value:"2009/09/21");
      script_set_attribute(attribute:"plugin_publication_date", value:"2013/07/12");
      script_set_attribute(attribute:"generated_plugin", value:"current");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_copyright(english:"This script is Copyright (C) 2013-2019 and is owned by Tenable, Inc. or an Affiliate thereof.");
      script_family(english:"Oracle Linux Local Security Checks");
    
      script_dependencies("ssh_get_info.nasl");
      script_require_keys("Host/local_checks_enabled", "Host/OracleLinux", "Host/RedHat/release", "Host/RedHat/rpm-list");
    
      exit(0);
    }
    
    
    include("audit.inc");
    include("global_settings.inc");
    include("rpm.inc");
    
    
    if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
    if (!get_kb_item("Host/OracleLinux")) audit(AUDIT_OS_NOT, "Oracle Linux");
    release = get_kb_item("Host/RedHat/release");
    if (isnull(release) || !pregmatch(pattern: "Oracle (?:Linux Server|Enterprise Linux)", string:release)) audit(AUDIT_OS_NOT, "Oracle Linux");
    os_ver = pregmatch(pattern: "Oracle (?:Linux Server|Enterprise Linux) .*release ([0-9]+(\.[0-9]+)?)", string:release);
    if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Oracle Linux");
    os_ver = os_ver[1];
    if (! preg(pattern:"^4([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Oracle Linux 4", "Oracle Linux " + os_ver);
    
    if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
    
    cpu = get_kb_item("Host/cpu");
    if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
    if ("x86_64" >!< cpu && "ia64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Oracle Linux", cpu);
    
    flag = 0;
    if (rpm_check(release:"EL4", reference:"finch-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"EL4", reference:"finch-devel-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"EL4", reference:"libpurple-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"EL4", reference:"libpurple-devel-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"EL4", reference:"libpurple-perl-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"EL4", reference:"libpurple-tcl-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"EL4", reference:"pidgin-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"EL4", reference:"pidgin-devel-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"EL4", reference:"pidgin-perl-2.6.2-2.el4")) flag++;
    
    
    if (flag)
    {
      if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());
      else security_warning(0);
      exit(0);
    }
    else
    {
      tested = pkg_tests_get();
      if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
      else audit(AUDIT_PACKAGE_NOT_INSTALLED, "finch / finch-devel / libpurple / libpurple-devel / libpurple-perl / etc");
    }
    
  • NASL familyUbuntu Local Security Checks
    NASL idUBUNTU_USN-886-1.NASL
    descriptionIt was discovered that Pidgin did not properly handle certain topic messages in the IRC protocol handler. If a user were tricked into connecting to a malicious IRC server, an attacker could cause Pidgin to crash, leading to a denial of service. This issue only affected Ubuntu 8.04 LTS, Ubuntu 8.10 and Ubuntu 9.04. (CVE-2009-2703) It was discovered that Pidgin did not properly enforce the
    last seen2020-06-01
    modified2020-06-02
    plugin id44057
    published2010-01-19
    reporterUbuntu Security Notice (C) 2010-2019 Canonical, Inc. / NASL script (C) 2010-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/44057
    titleUbuntu 8.04 LTS / 8.10 / 9.04 / 9.10 : pidgin vulnerabilities (USN-886-1)
    code
    #
    # (C) Tenable Network Security, Inc.
    #
    # The descriptive text and package checks in this plugin were
    # extracted from Ubuntu Security Notice USN-886-1. The text 
    # itself is copyright (C) Canonical, Inc. See 
    # <http://www.ubuntu.com/usn/>. Ubuntu(R) is a registered 
    # trademark of Canonical, Inc.
    #
    
    include("compat.inc");
    
    if (description)
    {
      script_id(44057);
      script_version("1.18");
      script_cvs_date("Date: 2019/09/19 12:54:26");
    
      script_cve_id("CVE-2008-2955", "CVE-2009-1376", "CVE-2009-2694", "CVE-2009-2703", "CVE-2009-3026", "CVE-2009-3083", "CVE-2009-3085", "CVE-2009-3615", "CVE-2010-0013");
      script_bugtraq_id(35067, 36277, 37524);
      script_xref(name:"USN", value:"886-1");
    
      script_name(english:"Ubuntu 8.04 LTS / 8.10 / 9.04 / 9.10 : pidgin vulnerabilities (USN-886-1)");
      script_summary(english:"Checks dpkg output for updated packages.");
    
      script_set_attribute(
        attribute:"synopsis", 
        value:
    "The remote Ubuntu host is missing one or more security-related
    patches."
      );
      script_set_attribute(
        attribute:"description", 
        value:
    "It was discovered that Pidgin did not properly handle certain topic
    messages in the IRC protocol handler. If a user were tricked into
    connecting to a malicious IRC server, an attacker could cause Pidgin
    to crash, leading to a denial of service. This issue only affected
    Ubuntu 8.04 LTS, Ubuntu 8.10 and Ubuntu 9.04. (CVE-2009-2703)
    
    It was discovered that Pidgin did not properly enforce the 'require
    TLS/SSL' setting when connecting to certain older Jabber servers. If a
    remote attacker were able to perform a man-in-the-middle attack, this
    flaw could be exploited to view sensitive information. This issue only
    affected Ubuntu 8.04 LTS, Ubuntu 8.10 and Ubuntu 9.04. (CVE-2009-3026)
    
    It was discovered that Pidgin did not properly handle certain SLP
    invite messages in the MSN protocol handler. A remote attacker could
    send a specially crafted invite message and cause Pidgin to crash,
    leading to a denial of service. This issue only affected Ubuntu 8.04
    LTS, Ubuntu 8.10 and Ubuntu 9.04. (CVE-2009-3083)
    
    It was discovered that Pidgin did not properly handle certain errors
    in the XMPP protocol handler. A remote attacker could send a specially
    crafted message and cause Pidgin to crash, leading to a denial of
    service. This issue only affected Ubuntu 8.10 and Ubuntu 9.04.
    (CVE-2009-3085)
    
    It was discovered that Pidgin did not properly handle malformed
    contact-list data in the OSCAR protocol handler. A remote attacker
    could send specially crafted contact-list data and cause Pidgin to
    crash, leading to a denial of service. (CVE-2009-3615)
    
    It was discovered that Pidgin did not properly handle custom smiley
    requests in the MSN protocol handler. A remote attacker could send a
    specially crafted filename in a custom smiley request and obtain
    arbitrary files via directory traversal. This issue only affected
    Ubuntu 8.10, Ubuntu 9.04 and Ubuntu 9.10. (CVE-2010-0013)
    
    Pidgin for Ubuntu 8.04 LTS was also updated to fix connection issues
    with the MSN protocol.
    
    USN-675-1 and USN-781-1 provided updated Pidgin packages to fix
    multiple security vulnerabilities in Ubuntu 8.04 LTS. The security
    patches to fix CVE-2008-2955 and CVE-2009-1376 were incomplete. This
    update corrects the problem. 
    
    It was discovered that Pidgin did not properly handle file transfers
    containing a long filename and special characters in the MSN protocol
    handler. A remote attacker could send a specially crafted filename in
    a file transfer request and cause Pidgin to crash, leading to a denial
    of service. (CVE-2008-2955)
    
    It was discovered that Pidgin did not properly handle
    certain malformed messages in the MSN protocol handler. A
    remote attacker could send a specially crafted message and
    possibly execute arbitrary code with user privileges.
    (CVE-2009-1376).
    
    Note that Tenable Network Security has extracted the preceding
    description block directly from the Ubuntu security advisory. Tenable
    has attempted to automatically clean and format it as much as possible
    without introducing additional issues."
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://usn.ubuntu.com/886-1/"
      );
      script_set_attribute(attribute:"solution", value:"Update the affected packages.");
      script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C");
      script_set_cvss_temporal_vector("CVSS2#E:F/RL:OF/RC:C");
      script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
      script_set_attribute(attribute:"exploit_available", value:"true");
      script_set_attribute(attribute:"exploit_framework_core", value:"true");
      script_cwe_id(20, 22, 119, 189, 310, 399);
    
      script_set_attribute(attribute:"plugin_type", value:"local");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:finch");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:finch-dev");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:gaim");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libpurple-bin");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libpurple-dev");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libpurple0");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:pidgin");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:pidgin-data");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:pidgin-dbg");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:pidgin-dev");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:8.04:-:lts");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:8.10");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:9.04");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:9.10");
    
      script_set_attribute(attribute:"vuln_publication_date", value:"2008/07/01");
      script_set_attribute(attribute:"patch_publication_date", value:"2010/01/18");
      script_set_attribute(attribute:"plugin_publication_date", value:"2010/01/19");
      script_set_attribute(attribute:"generated_plugin", value:"current");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_copyright(english:"Ubuntu Security Notice (C) 2010-2019 Canonical, Inc. / NASL script (C) 2010-2019 and is owned by Tenable, Inc. or an Affiliate thereof.");
      script_family(english:"Ubuntu Local Security Checks");
    
      script_dependencies("ssh_get_info.nasl");
      script_require_keys("Host/cpu", "Host/Ubuntu", "Host/Ubuntu/release", "Host/Debian/dpkg-l");
    
      exit(0);
    }
    
    
    include("audit.inc");
    include("ubuntu.inc");
    include("misc_func.inc");
    
    if ( ! get_kb_item("Host/local_checks_enabled") ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
    release = get_kb_item("Host/Ubuntu/release");
    if ( isnull(release) ) audit(AUDIT_OS_NOT, "Ubuntu");
    release = chomp(release);
    if (! preg(pattern:"^(8\.04|8\.10|9\.04|9\.10)$", string:release)) audit(AUDIT_OS_NOT, "Ubuntu 8.04 / 8.10 / 9.04 / 9.10", "Ubuntu " + release);
    if ( ! get_kb_item("Host/Debian/dpkg-l") ) audit(AUDIT_PACKAGE_LIST_MISSING);
    
    cpu = get_kb_item("Host/cpu");
    if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
    if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Ubuntu", cpu);
    
    flag = 0;
    
    if (ubuntu_check(osver:"8.04", pkgname:"finch", pkgver:"2.4.1-1ubuntu2.8")) flag++;
    if (ubuntu_check(osver:"8.04", pkgname:"finch-dev", pkgver:"2.4.1-1ubuntu2.8")) flag++;
    if (ubuntu_check(osver:"8.04", pkgname:"gaim", pkgver:"2.4.1-1ubuntu2.8")) flag++;
    if (ubuntu_check(osver:"8.04", pkgname:"libpurple-bin", pkgver:"2.4.1-1ubuntu2.8")) flag++;
    if (ubuntu_check(osver:"8.04", pkgname:"libpurple-dev", pkgver:"2.4.1-1ubuntu2.8")) flag++;
    if (ubuntu_check(osver:"8.04", pkgname:"libpurple0", pkgver:"2.4.1-1ubuntu2.8")) flag++;
    if (ubuntu_check(osver:"8.04", pkgname:"pidgin", pkgver:"1:2.4.1-1ubuntu2.8")) flag++;
    if (ubuntu_check(osver:"8.04", pkgname:"pidgin-data", pkgver:"2.4.1-1ubuntu2.8")) flag++;
    if (ubuntu_check(osver:"8.04", pkgname:"pidgin-dbg", pkgver:"2.4.1-1ubuntu2.8")) flag++;
    if (ubuntu_check(osver:"8.04", pkgname:"pidgin-dev", pkgver:"2.4.1-1ubuntu2.8")) flag++;
    if (ubuntu_check(osver:"8.10", pkgname:"finch", pkgver:"2.5.2-0ubuntu1.6")) flag++;
    if (ubuntu_check(osver:"8.10", pkgname:"finch-dev", pkgver:"2.5.2-0ubuntu1.6")) flag++;
    if (ubuntu_check(osver:"8.10", pkgname:"libpurple-bin", pkgver:"2.5.2-0ubuntu1.6")) flag++;
    if (ubuntu_check(osver:"8.10", pkgname:"libpurple-dev", pkgver:"2.5.2-0ubuntu1.6")) flag++;
    if (ubuntu_check(osver:"8.10", pkgname:"libpurple0", pkgver:"2.5.2-0ubuntu1.6")) flag++;
    if (ubuntu_check(osver:"8.10", pkgname:"pidgin", pkgver:"1:2.5.2-0ubuntu1.6")) flag++;
    if (ubuntu_check(osver:"8.10", pkgname:"pidgin-data", pkgver:"2.5.2-0ubuntu1.6")) flag++;
    if (ubuntu_check(osver:"8.10", pkgname:"pidgin-dbg", pkgver:"2.5.2-0ubuntu1.6")) flag++;
    if (ubuntu_check(osver:"8.10", pkgname:"pidgin-dev", pkgver:"2.5.2-0ubuntu1.6")) flag++;
    if (ubuntu_check(osver:"9.04", pkgname:"finch", pkgver:"2.5.5-1ubuntu8.5")) flag++;
    if (ubuntu_check(osver:"9.04", pkgname:"finch-dev", pkgver:"2.5.5-1ubuntu8.5")) flag++;
    if (ubuntu_check(osver:"9.04", pkgname:"libpurple-bin", pkgver:"2.5.5-1ubuntu8.5")) flag++;
    if (ubuntu_check(osver:"9.04", pkgname:"libpurple-dev", pkgver:"2.5.5-1ubuntu8.5")) flag++;
    if (ubuntu_check(osver:"9.04", pkgname:"libpurple0", pkgver:"2.5.5-1ubuntu8.5")) flag++;
    if (ubuntu_check(osver:"9.04", pkgname:"pidgin", pkgver:"1:2.5.5-1ubuntu8.5")) flag++;
    if (ubuntu_check(osver:"9.04", pkgname:"pidgin-data", pkgver:"2.5.5-1ubuntu8.5")) flag++;
    if (ubuntu_check(osver:"9.04", pkgname:"pidgin-dbg", pkgver:"2.5.5-1ubuntu8.5")) flag++;
    if (ubuntu_check(osver:"9.04", pkgname:"pidgin-dev", pkgver:"2.5.5-1ubuntu8.5")) flag++;
    if (ubuntu_check(osver:"9.10", pkgname:"finch", pkgver:"2.6.2-1ubuntu7.1")) flag++;
    if (ubuntu_check(osver:"9.10", pkgname:"finch-dev", pkgver:"2.6.2-1ubuntu7.1")) flag++;
    if (ubuntu_check(osver:"9.10", pkgname:"libpurple-bin", pkgver:"2.6.2-1ubuntu7.1")) flag++;
    if (ubuntu_check(osver:"9.10", pkgname:"libpurple-dev", pkgver:"2.6.2-1ubuntu7.1")) flag++;
    if (ubuntu_check(osver:"9.10", pkgname:"libpurple0", pkgver:"2.6.2-1ubuntu7.1")) flag++;
    if (ubuntu_check(osver:"9.10", pkgname:"pidgin", pkgver:"1:2.6.2-1ubuntu7.1")) flag++;
    if (ubuntu_check(osver:"9.10", pkgname:"pidgin-data", pkgver:"2.6.2-1ubuntu7.1")) flag++;
    if (ubuntu_check(osver:"9.10", pkgname:"pidgin-dbg", pkgver:"2.6.2-1ubuntu7.1")) flag++;
    if (ubuntu_check(osver:"9.10", pkgname:"pidgin-dev", pkgver:"2.6.2-1ubuntu7.1")) flag++;
    
    if (flag)
    {
      security_report_v4(
        port       : 0,
        severity   : SECURITY_HOLE,
        extra      : ubuntu_report_get()
      );
      exit(0);
    }
    else
    {
      tested = ubuntu_pkg_tests_get();
      if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
      else audit(AUDIT_PACKAGE_NOT_INSTALLED, "finch / finch-dev / gaim / libpurple-bin / libpurple-dev / etc");
    }
    
  • NASL familyScientific Linux Local Security Checks
    NASL idSL_20091029_PIDGIN_ON_SL3_X.NASL
    descriptionAn invalid pointer dereference bug was found in the way the Pidgin OSCAR protocol implementation processed lists of contacts. A remote attacker could send a specially crafted contact list to a user running Pidgin, causing Pidgin to crash. (CVE-2009-3615) A NULL pointer dereference flaw was found in the way the Pidgin IRC protocol plug-in handles IRC topics. A malicious IRC server could send a specially crafted IRC TOPIC message, which once received by Pidgin, would lead to a denial of service (Pidgin crash). (CVE-2009-2703) - SL3 only A NULL pointer dereference flaw was found in the way the Pidgin MSN protocol plug-in handles improper MSNSLP invitations. A remote attacker could send a specially crafted MSNSLP invitation request, which once accepted by a valid Pidgin user, would lead to a denial of service (Pidgin crash). (CVE-2009-3083) - SL3 only Pidgin must be restarted for this update to take effect.
    last seen2020-06-01
    modified2020-06-02
    plugin id60686
    published2012-08-01
    reporterThis script is Copyright (C) 2012-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/60686
    titleScientific Linux Security Update : pidgin on SL3.x, SL4.x, SL5.x i386/x86_64
    code
    #%NASL_MIN_LEVEL 80502
    #
    # (C) Tenable Network Security, Inc.
    #
    # The descriptive text is (C) Scientific Linux.
    #
    
    include("compat.inc");
    
    if (description)
    {
      script_id(60686);
      script_version("1.6");
      script_cvs_date("Date: 2019/10/25 13:36:18");
    
      script_cve_id("CVE-2009-2703", "CVE-2009-3083", "CVE-2009-3615");
    
      script_name(english:"Scientific Linux Security Update : pidgin on SL3.x, SL4.x, SL5.x i386/x86_64");
      script_summary(english:"Checks rpm output for the updated packages");
    
      script_set_attribute(
        attribute:"synopsis", 
        value:
    "The remote Scientific Linux host is missing one or more security
    updates."
      );
      script_set_attribute(
        attribute:"description", 
        value:
    "An invalid pointer dereference bug was found in the way the Pidgin
    OSCAR protocol implementation processed lists of contacts. A remote
    attacker could send a specially crafted contact list to a user running
    Pidgin, causing Pidgin to crash. (CVE-2009-3615)
    
    A NULL pointer dereference flaw was found in the way the Pidgin IRC
    protocol plug-in handles IRC topics. A malicious IRC server could send
    a specially crafted IRC TOPIC message, which once received by Pidgin,
    would lead to a denial of service (Pidgin crash). (CVE-2009-2703) -
    SL3 only
    
    A NULL pointer dereference flaw was found in the way the Pidgin MSN
    protocol plug-in handles improper MSNSLP invitations. A remote
    attacker could send a specially crafted MSNSLP invitation request,
    which once accepted by a valid Pidgin user, would lead to a denial of
    service (Pidgin crash). (CVE-2009-3083) - SL3 only
    
    Pidgin must be restarted for this update to take effect."
      );
      # https://listserv.fnal.gov/scripts/wa.exe?A2=ind0911&L=scientific-linux-errata&T=0&P=79
      script_set_attribute(
        attribute:"see_also",
        value:"http://www.nessus.org/u?a200d3a9"
      );
      script_set_attribute(attribute:"solution", value:"Update the affected packages.");
      script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P");
      script_cwe_id(119, 399);
    
      script_set_attribute(attribute:"plugin_type", value:"local");
      script_set_attribute(attribute:"cpe", value:"x-cpe:/o:fermilab:scientific_linux");
    
      script_set_attribute(attribute:"patch_publication_date", value:"2009/10/29");
      script_set_attribute(attribute:"plugin_publication_date", value:"2012/08/01");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_copyright(english:"This script is Copyright (C) 2012-2019 and is owned by Tenable, Inc. or an Affiliate thereof.");
      script_family(english:"Scientific Linux Local Security Checks");
    
      script_dependencies("ssh_get_info.nasl");
      script_require_keys("Host/local_checks_enabled", "Host/cpu", "Host/RedHat/release", "Host/RedHat/rpm-list");
    
      exit(0);
    }
    
    
    include("audit.inc");
    include("global_settings.inc");
    include("rpm.inc");
    
    
    if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
    release = get_kb_item("Host/RedHat/release");
    if (isnull(release) || "Scientific Linux " >!< release) audit(AUDIT_HOST_NOT, "running Scientific Linux");
    if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
    
    cpu = get_kb_item("Host/cpu");
    if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
    if (cpu >!< "x86_64" && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Scientific Linux", cpu);
    
    
    flag = 0;
    if (rpm_check(release:"SL3", reference:"pidgin-1.5.1-6.el3")) flag++;
    
    if (rpm_check(release:"SL4", reference:"finch-2.6.3-2.el4")) flag++;
    if (rpm_check(release:"SL4", reference:"finch-devel-2.6.3-2.el4")) flag++;
    if (rpm_check(release:"SL4", reference:"libpurple-2.6.3-2.el4")) flag++;
    if (rpm_check(release:"SL4", reference:"libpurple-devel-2.6.3-2.el4")) flag++;
    if (rpm_check(release:"SL4", reference:"libpurple-perl-2.6.3-2.el4")) flag++;
    if (rpm_check(release:"SL4", reference:"libpurple-tcl-2.6.3-2.el4")) flag++;
    if (rpm_check(release:"SL4", reference:"pidgin-2.6.3-2.el4")) flag++;
    if (rpm_check(release:"SL4", reference:"pidgin-devel-2.6.3-2.el4")) flag++;
    if (rpm_check(release:"SL4", reference:"pidgin-perl-2.6.3-2.el4")) flag++;
    
    if (rpm_check(release:"SL5", reference:"finch-2.6.3-2.el5")) flag++;
    if (rpm_check(release:"SL5", reference:"finch-devel-2.6.3-2.el5")) flag++;
    if (rpm_check(release:"SL5", reference:"libpurple-2.6.3-2.el5")) flag++;
    if (rpm_check(release:"SL5", reference:"libpurple-devel-2.6.3-2.el5")) flag++;
    if (rpm_check(release:"SL5", reference:"libpurple-perl-2.6.3-2.el5")) flag++;
    if (rpm_check(release:"SL5", reference:"libpurple-tcl-2.6.3-2.el5")) flag++;
    if (rpm_check(release:"SL5", reference:"pidgin-2.6.3-2.el5")) flag++;
    if (rpm_check(release:"SL5", reference:"pidgin-devel-2.6.3-2.el5")) flag++;
    if (rpm_check(release:"SL5", reference:"pidgin-perl-2.6.3-2.el5")) flag++;
    
    
    if (flag)
    {
      if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());
      else security_warning(0);
      exit(0);
    }
    else audit(AUDIT_HOST_NOT, "affected");
    
  • NASL familyRed Hat Local Security Checks
    NASL idREDHAT-RHSA-2009-1535.NASL
    descriptionAn updated pidgin package that fixes several security issues is now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. An invalid pointer dereference bug was found in the way the Pidgin OSCAR protocol implementation processed lists of contacts. A remote attacker could send a specially crafted contact list to a user running Pidgin, causing Pidgin to crash. (CVE-2009-3615) A NULL pointer dereference flaw was found in the way the Pidgin IRC protocol plug-in handles IRC topics. A malicious IRC server could send a specially crafted IRC TOPIC message, which once received by Pidgin, would lead to a denial of service (Pidgin crash). (CVE-2009-2703) A NULL pointer dereference flaw was found in the way the Pidgin MSN protocol plug-in handles improper MSNSLP invitations. A remote attacker could send a specially crafted MSNSLP invitation request, which once accepted by a valid Pidgin user, would lead to a denial of service (Pidgin crash). (CVE-2009-3083) All Pidgin users should upgrade to this updated package, which contains backported patches to resolve these issues. Pidgin must be restarted for this update to take effect.
    last seen2020-06-01
    modified2020-06-02
    plugin id42312
    published2009-10-30
    reporterThis script is Copyright (C) 2009-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/42312
    titleRHEL 3 : pidgin (RHSA-2009:1535)
    code
    #%NASL_MIN_LEVEL 80502
    #
    # (C) Tenable Network Security, Inc.
    #
    # The descriptive text and package checks in this plugin were  
    # extracted from Red Hat Security Advisory RHSA-2009:1535. The text 
    # itself is copyright (C) Red Hat, Inc.
    #
    
    include("compat.inc");
    
    if (description)
    {
      script_id(42312);
      script_version ("1.21");
      script_cvs_date("Date: 2019/10/25 13:36:14");
    
      script_cve_id("CVE-2009-2703", "CVE-2009-3083", "CVE-2009-3615");
      script_bugtraq_id(36277);
      script_xref(name:"RHSA", value:"2009:1535");
    
      script_name(english:"RHEL 3 : pidgin (RHSA-2009:1535)");
      script_summary(english:"Checks the rpm output for the updated package");
    
      script_set_attribute(
        attribute:"synopsis", 
        value:"The remote Red Hat host is missing a security update."
      );
      script_set_attribute(
        attribute:"description", 
        value:
    "An updated pidgin package that fixes several security issues is now
    available for Red Hat Enterprise Linux 3.
    
    This update has been rated as having moderate security impact by the
    Red Hat Security Response Team.
    
    Pidgin is an instant messaging program which can log in to multiple
    accounts on multiple instant messaging networks simultaneously.
    
    An invalid pointer dereference bug was found in the way the Pidgin
    OSCAR protocol implementation processed lists of contacts. A remote
    attacker could send a specially crafted contact list to a user running
    Pidgin, causing Pidgin to crash. (CVE-2009-3615)
    
    A NULL pointer dereference flaw was found in the way the Pidgin IRC
    protocol plug-in handles IRC topics. A malicious IRC server could send
    a specially crafted IRC TOPIC message, which once received by Pidgin,
    would lead to a denial of service (Pidgin crash). (CVE-2009-2703)
    
    A NULL pointer dereference flaw was found in the way the Pidgin MSN
    protocol plug-in handles improper MSNSLP invitations. A remote
    attacker could send a specially crafted MSNSLP invitation request,
    which once accepted by a valid Pidgin user, would lead to a denial of
    service (Pidgin crash). (CVE-2009-3083)
    
    All Pidgin users should upgrade to this updated package, which
    contains backported patches to resolve these issues. Pidgin must be
    restarted for this update to take effect."
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://access.redhat.com/security/cve/cve-2009-2703"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://access.redhat.com/security/cve/cve-2009-3083"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://access.redhat.com/security/cve/cve-2009-3615"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://access.redhat.com/errata/RHSA-2009:1535"
      );
      script_set_attribute(
        attribute:"solution", 
        value:"Update the affected pidgin package."
      );
      script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P");
      script_set_cvss_temporal_vector("CVSS2#E:ND/RL:OF/RC:C");
      script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
      script_set_attribute(attribute:"exploit_available", value:"false");
      script_cwe_id(119, 399);
    
      script_set_attribute(attribute:"plugin_type", value:"local");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:pidgin");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:3");
    
      script_set_attribute(attribute:"vuln_publication_date", value:"2009/09/08");
      script_set_attribute(attribute:"patch_publication_date", value:"2009/10/29");
      script_set_attribute(attribute:"plugin_publication_date", value:"2009/10/30");
      script_set_attribute(attribute:"generated_plugin", value:"current");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_copyright(english:"This script is Copyright (C) 2009-2019 and is owned by Tenable, Inc. or an Affiliate thereof.");
      script_family(english:"Red Hat Local Security Checks");
    
      script_dependencies("ssh_get_info.nasl");
      script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list", "Host/cpu");
    
      exit(0);
    }
    
    
    include("audit.inc");
    include("global_settings.inc");
    include("misc_func.inc");
    include("rpm.inc");
    
    if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
    release = get_kb_item("Host/RedHat/release");
    if (isnull(release) || "Red Hat" >!< release) audit(AUDIT_OS_NOT, "Red Hat");
    os_ver = pregmatch(pattern: "Red Hat Enterprise Linux.*release ([0-9]+(\.[0-9]+)?)", string:release);
    if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Red Hat");
    os_ver = os_ver[1];
    if (! preg(pattern:"^3([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Red Hat 3.x", "Red Hat " + os_ver);
    
    if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
    
    cpu = get_kb_item("Host/cpu");
    if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
    if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$" && "s390" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Red Hat", cpu);
    
    yum_updateinfo = get_kb_item("Host/RedHat/yum-updateinfo");
    if (!empty_or_null(yum_updateinfo)) 
    {
      rhsa = "RHSA-2009:1535";
      yum_report = redhat_generate_yum_updateinfo_report(rhsa:rhsa);
      if (!empty_or_null(yum_report))
      {
        security_report_v4(
          port       : 0,
          severity   : SECURITY_WARNING,
          extra      : yum_report 
        );
        exit(0);
      }
      else
      {
        audit_message = "affected by Red Hat security advisory " + rhsa;
        audit(AUDIT_OS_NOT, audit_message);
      }
    }
    else
    {
      flag = 0;
      if (rpm_check(release:"RHEL3", reference:"pidgin-1.5.1-6.el3")) flag++;
    
      if (flag)
      {
        security_report_v4(
          port       : 0,
          severity   : SECURITY_WARNING,
          extra      : rpm_report_get() + redhat_report_package_caveat()
        );
        exit(0);
      }
      else
      {
        tested = pkg_tests_get();
        if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
        else audit(AUDIT_PACKAGE_NOT_INSTALLED, "pidgin");
      }
    }
    
  • NASL familyMandriva Local Security Checks
    NASL idMANDRIVA_MDVSA-2009-321.NASL
    descriptionSecurity vulnerabilities has been identified and fixed in pidgin : The NSS plugin in libpurple in Pidgin 2.4.1 does not verify SSL certificates, which makes it easier for remote attackers to trick a user into accepting an invalid server certificate for a spoofed service. (CVE-2008-3532) Pidgin 2.4.1 allows remote attackers to cause a denial of service (crash) via a long filename that contains certain characters, as demonstrated using an MSN message that triggers the crash in the msn_slplink_process_msg function. (CVE-2008-2955) The UPnP functionality in Pidgin 2.0.0, and possibly other versions, allows remote attackers to trigger the download of arbitrary files and cause a denial of service (memory or disk consumption) via a UDP packet that specifies an arbitrary URL. (CVE-2008-2957) Buffer overflow in the XMPP SOCKS5 bytestream server in Pidgin (formerly Gaim) before 2.5.6 allows remote authenticated users to execute arbitrary code via vectors involving an outbound XMPP file transfer. NOTE: some of these details are obtained from third-party information (CVE-2009-1373). Buffer overflow in the decrypt_out function in Pidgin (formerly Gaim) before 2.5.6 allows remote attackers to cause a denial of service (application crash) via a QQ packet (CVE-2009-1374). The PurpleCircBuffer implementation in Pidgin (formerly Gaim) before 2.5.6 does not properly maintain a certain buffer, which allows remote attackers to cause a denial of service (memory corruption and application crash) via vectors involving the (1) XMPP or (2) Sametime protocol (CVE-2009-1375). Multiple integer overflows in the msn_slplink_process_msg functions in the MSN protocol handler in (1) libpurple/protocols/msn/slplink.c and (2) libpurple/protocols/msnp9/slplink.c in Pidgin (formerly Gaim) before 2.5.6 on 32-bit platforms allow remote attackers to execute arbitrary code via a malformed SLP message with a crafted offset value, leading to buffer overflows. NOTE: this issue exists because of an incomplete fix for CVE-2008-2927 (CVE-2009-1376). The OSCAR protocol implementation in Pidgin before 2.5.8 misinterprets the ICQWebMessage message type as the ICQSMS message type, which allows remote attackers to cause a denial of service (application crash) via a crafted ICQ web message that triggers allocation of a large amount of memory (CVE-2009-1889). The msn_slplink_process_msg function in libpurple/protocols/msn/slplink.c in libpurple, as used in Pidgin (formerly Gaim) before 2.5.9 and Adium 1.3.5 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) by sending multiple crafted SLP (aka MSNSLP) messages to trigger an overwrite of an arbitrary memory location. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2009-1376 (CVE-2009-2694). Unspecified vulnerability in Pidgin 2.6.0 allows remote attackers to cause a denial of service (crash) via a link in a Yahoo IM (CVE-2009-3025) protocols/jabber/auth.c in libpurple in Pidgin 2.6.0, and possibly other versions, does not follow the require TLS/SSL preference when connecting to older Jabber servers that do not follow the XMPP specification, which causes libpurple to connect to the server without the expected encryption and allows remote attackers to sniff sessions (CVE-2009-3026). libpurple/protocols/irc/msgs.c in the IRC protocol plugin in libpurple in Pidgin before 2.6.2 allows remote IRC servers to cause a denial of service (NULL pointer dereference and application crash) via a TOPIC message that lacks a topic string (CVE-2009-2703). The msn_slp_sip_recv function in libpurple/protocols/msn/slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an SLP invite message that lacks certain required fields, as demonstrated by a malformed message from a KMess client (CVE-2009-3083). The msn_slp_process_msg function in libpurple/protocols/msn/slpcall.c in the MSN protocol plugin in libpurple 2.6.0 and 2.6.1, as used in Pidgin before 2.6.2, allows remote attackers to cause a denial of service (application crash) via a handwritten (aka Ink) message, related to an uninitialized variable and the incorrect UTF16-LE charset name (CVE-2009-3084). The XMPP protocol plugin in libpurple in Pidgin before 2.6.2 does not properly handle an error IQ stanza during an attempted fetch of a custom smiley, which allows remote attackers to cause a denial of service (application crash) via XHTML-IM content with cid: images (CVE-2009-3085). This update provides pidgin 2.6.2, which is not vulnerable to these issues.
    last seen2020-06-01
    modified2020-06-02
    plugin id43024
    published2009-12-07
    reporterThis script is Copyright (C) 2009-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/43024
    titleMandriva Linux Security Advisory : pidgin (MDVSA-2009:321)
    code
    #%NASL_MIN_LEVEL 80502
    
    #
    # (C) Tenable Network Security, Inc.
    #
    # The descriptive text and package checks in this plugin were  
    # extracted from Mandriva Linux Security Advisory MDVSA-2009:321. 
    # The text itself is copyright (C) Mandriva S.A.
    #
    
    if (NASL_LEVEL < 3000) exit(0);
    
    include("compat.inc");
    
    if (description)
    {
      script_id(43024);
      script_version("1.23");
      script_cvs_date("Date: 2019/10/16 10:34:21");
    
      script_cve_id("CVE-2008-2955", "CVE-2008-2957", "CVE-2008-3532", "CVE-2009-1373", "CVE-2009-1374", "CVE-2009-1375", "CVE-2009-1376", "CVE-2009-1889", "CVE-2009-2694", "CVE-2009-2703", "CVE-2009-3025", "CVE-2009-3026", "CVE-2009-3083", "CVE-2009-3084", "CVE-2009-3085");
      script_bugtraq_id(35067, 35530, 36071, 36277);
      script_xref(name:"MDVSA", value:"2009:321");
    
      script_name(english:"Mandriva Linux Security Advisory : pidgin (MDVSA-2009:321)");
      script_summary(english:"Checks rpm output for the updated packages");
    
      script_set_attribute(
        attribute:"synopsis", 
        value:
    "The remote Mandriva Linux host is missing one or more security
    updates."
      );
      script_set_attribute(
        attribute:"description", 
        value:
    "Security vulnerabilities has been identified and fixed in pidgin :
    
    The NSS plugin in libpurple in Pidgin 2.4.1 does not verify SSL
    certificates, which makes it easier for remote attackers to trick a
    user into accepting an invalid server certificate for a spoofed
    service. (CVE-2008-3532)
    
    Pidgin 2.4.1 allows remote attackers to cause a denial of service
    (crash) via a long filename that contains certain characters, as
    demonstrated using an MSN message that triggers the crash in the
    msn_slplink_process_msg function. (CVE-2008-2955)
    
    The UPnP functionality in Pidgin 2.0.0, and possibly other versions,
    allows remote attackers to trigger the download of arbitrary files and
    cause a denial of service (memory or disk consumption) via a UDP
    packet that specifies an arbitrary URL. (CVE-2008-2957)
    
    Buffer overflow in the XMPP SOCKS5 bytestream server in Pidgin
    (formerly Gaim) before 2.5.6 allows remote authenticated users to
    execute arbitrary code via vectors involving an outbound XMPP file
    transfer. NOTE: some of these details are obtained from third-party
    information (CVE-2009-1373).
    
    Buffer overflow in the decrypt_out function in Pidgin (formerly Gaim)
    before 2.5.6 allows remote attackers to cause a denial of service
    (application crash) via a QQ packet (CVE-2009-1374).
    
    The PurpleCircBuffer implementation in Pidgin (formerly Gaim) before
    2.5.6 does not properly maintain a certain buffer, which allows remote
    attackers to cause a denial of service (memory corruption and
    application crash) via vectors involving the (1) XMPP or (2) Sametime
    protocol (CVE-2009-1375).
    
    Multiple integer overflows in the msn_slplink_process_msg functions in
    the MSN protocol handler in (1) libpurple/protocols/msn/slplink.c and
    (2) libpurple/protocols/msnp9/slplink.c in Pidgin (formerly Gaim)
    before 2.5.6 on 32-bit platforms allow remote attackers to execute
    arbitrary code via a malformed SLP message with a crafted offset
    value, leading to buffer overflows. NOTE: this issue exists because of
    an incomplete fix for CVE-2008-2927 (CVE-2009-1376).
    
    The OSCAR protocol implementation in Pidgin before 2.5.8 misinterprets
    the ICQWebMessage message type as the ICQSMS message type, which
    allows remote attackers to cause a denial of service (application
    crash) via a crafted ICQ web message that triggers allocation of a
    large amount of memory (CVE-2009-1889).
    
    The msn_slplink_process_msg function in
    libpurple/protocols/msn/slplink.c in libpurple, as used in Pidgin
    (formerly Gaim) before 2.5.9 and Adium 1.3.5 and earlier, allows
    remote attackers to execute arbitrary code or cause a denial of
    service (memory corruption and application crash) by sending multiple
    crafted SLP (aka MSNSLP) messages to trigger an overwrite of an
    arbitrary memory location. NOTE: this issue reportedly exists because
    of an incomplete fix for CVE-2009-1376 (CVE-2009-2694).
    
    Unspecified vulnerability in Pidgin 2.6.0 allows remote attackers to
    cause a denial of service (crash) via a link in a Yahoo IM
    (CVE-2009-3025)
    
    protocols/jabber/auth.c in libpurple in Pidgin 2.6.0, and possibly
    other versions, does not follow the require TLS/SSL preference when
    connecting to older Jabber servers that do not follow the XMPP
    specification, which causes libpurple to connect to the server without
    the expected encryption and allows remote attackers to sniff sessions
    (CVE-2009-3026).
    
    libpurple/protocols/irc/msgs.c in the IRC protocol plugin in libpurple
    in Pidgin before 2.6.2 allows remote IRC servers to cause a denial of
    service (NULL pointer dereference and application crash) via a TOPIC
    message that lacks a topic string (CVE-2009-2703).
    
    The msn_slp_sip_recv function in libpurple/protocols/msn/slp.c in the
    MSN protocol plugin in libpurple in Pidgin before 2.6.2 allows remote
    attackers to cause a denial of service (NULL pointer dereference and
    application crash) via an SLP invite message that lacks certain
    required fields, as demonstrated by a malformed message from a KMess
    client (CVE-2009-3083).
    
    The msn_slp_process_msg function in libpurple/protocols/msn/slpcall.c
    in the MSN protocol plugin in libpurple 2.6.0 and 2.6.1, as used in
    Pidgin before 2.6.2, allows remote attackers to cause a denial of
    service (application crash) via a handwritten (aka Ink) message,
    related to an uninitialized variable and the incorrect UTF16-LE
    charset name (CVE-2009-3084).
    
    The XMPP protocol plugin in libpurple in Pidgin before 2.6.2 does not
    properly handle an error IQ stanza during an attempted fetch of a
    custom smiley, which allows remote attackers to cause a denial of
    service (application crash) via XHTML-IM content with cid: images
    (CVE-2009-3085).
    
    This update provides pidgin 2.6.2, which is not vulnerable to these
    issues."
      );
      script_set_attribute(
        attribute:"see_also",
        value:"http://pidgin.im/news/security/"
      );
      script_set_attribute(attribute:"solution", value:"Update the affected packages.");
      script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C");
      script_set_cvss_temporal_vector("CVSS2#E:H/RL:OF/RC:C");
      script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
      script_set_attribute(attribute:"exploit_available", value:"true");
      script_set_attribute(attribute:"exploit_framework_core", value:"true");
      script_set_attribute(attribute:"exploited_by_malware", value:"true");
      script_cwe_id(20, 119, 189, 310, 399);
    
      script_set_attribute(attribute:"plugin_type", value:"local");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:finch");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:lib64finch0");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:lib64purple-devel");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:lib64purple0");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libfinch0");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libpurple-devel");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libpurple0");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:pidgin");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:pidgin-bonjour");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:pidgin-client");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:pidgin-gevolution");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:pidgin-i18n");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:pidgin-meanwhile");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:pidgin-mono");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:pidgin-perl");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:pidgin-plugins");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:pidgin-silc");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:pidgin-tcl");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:mandriva:linux:2008.0");
    
      script_set_attribute(attribute:"patch_publication_date", value:"2009/12/06");
      script_set_attribute(attribute:"plugin_publication_date", value:"2009/12/07");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_copyright(english:"This script is Copyright (C) 2009-2019 and is owned by Tenable, Inc. or an Affiliate thereof.");
      script_family(english:"Mandriva Local Security Checks");
    
      script_dependencies("ssh_get_info.nasl");
      script_require_keys("Host/local_checks_enabled", "Host/cpu", "Host/Mandrake/release", "Host/Mandrake/rpm-list");
    
      exit(0);
    }
    
    
    include("audit.inc");
    include("global_settings.inc");
    include("rpm.inc");
    
    
    if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
    if (!get_kb_item("Host/Mandrake/release")) audit(AUDIT_OS_NOT, "Mandriva / Mandake Linux");
    if (!get_kb_item("Host/Mandrake/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
    
    cpu = get_kb_item("Host/cpu");
    if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
    if (cpu !~ "^(amd64|i[3-6]86|x86_64)$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Mandriva / Mandrake Linux", cpu);
    
    
    flag = 0;
    if (rpm_check(release:"MDK2008.0", reference:"finch-2.6.2-0.1mdv2008.0", yank:"mdv")) flag++;
    if (rpm_check(release:"MDK2008.0", cpu:"x86_64", reference:"lib64finch0-2.6.2-0.1mdv2008.0", yank:"mdv")) flag++;
    if (rpm_check(release:"MDK2008.0", cpu:"x86_64", reference:"lib64purple-devel-2.6.2-0.1mdv2008.0", yank:"mdv")) flag++;
    if (rpm_check(release:"MDK2008.0", cpu:"x86_64", reference:"lib64purple0-2.6.2-0.1mdv2008.0", yank:"mdv")) flag++;
    if (rpm_check(release:"MDK2008.0", cpu:"i386", reference:"libfinch0-2.6.2-0.1mdv2008.0", yank:"mdv")) flag++;
    if (rpm_check(release:"MDK2008.0", cpu:"i386", reference:"libpurple-devel-2.6.2-0.1mdv2008.0", yank:"mdv")) flag++;
    if (rpm_check(release:"MDK2008.0", cpu:"i386", reference:"libpurple0-2.6.2-0.1mdv2008.0", yank:"mdv")) flag++;
    if (rpm_check(release:"MDK2008.0", reference:"pidgin-2.6.2-0.1mdv2008.0", yank:"mdv")) flag++;
    if (rpm_check(release:"MDK2008.0", reference:"pidgin-bonjour-2.6.2-0.1mdv2008.0", yank:"mdv")) flag++;
    if (rpm_check(release:"MDK2008.0", reference:"pidgin-client-2.6.2-0.1mdv2008.0", yank:"mdv")) flag++;
    if (rpm_check(release:"MDK2008.0", reference:"pidgin-gevolution-2.6.2-0.1mdv2008.0", yank:"mdv")) flag++;
    if (rpm_check(release:"MDK2008.0", reference:"pidgin-i18n-2.6.2-0.1mdv2008.0", yank:"mdv")) flag++;
    if (rpm_check(release:"MDK2008.0", reference:"pidgin-meanwhile-2.6.2-0.1mdv2008.0", yank:"mdv")) flag++;
    if (rpm_check(release:"MDK2008.0", reference:"pidgin-mono-2.6.2-0.1mdv2008.0", yank:"mdv")) flag++;
    if (rpm_check(release:"MDK2008.0", reference:"pidgin-perl-2.6.2-0.1mdv2008.0", yank:"mdv")) flag++;
    if (rpm_check(release:"MDK2008.0", reference:"pidgin-plugins-2.6.2-0.1mdv2008.0", yank:"mdv")) flag++;
    if (rpm_check(release:"MDK2008.0", reference:"pidgin-silc-2.6.2-0.1mdv2008.0", yank:"mdv")) flag++;
    if (rpm_check(release:"MDK2008.0", reference:"pidgin-tcl-2.6.2-0.1mdv2008.0", yank:"mdv")) flag++;
    
    
    if (flag)
    {
      if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());
      else security_hole(0);
      exit(0);
    }
    else audit(AUDIT_HOST_NOT, "affected");
    
  • NASL familyScientific Linux Local Security Checks
    NASL idSL_20090921_PIDGIN_ON_SL4_X.NASL
    descriptionCVE-2009-3026 pidgin: ignores SSL/TLS requirements with old jabber servers CVE-2009-2703 Pidgin: NULL pointer dereference by handling IRC topic(s) (DoS) CVE-2009-3083 Pidgin: NULL pointer dereference by processing incomplete MSN SLP invite (DoS) CVE-2009-3085 Pidgin: NULL pointer dereference by processing a custom smiley (DoS) A NULL pointer dereference flaw was found in the way the Pidgin XMPP protocol plug-in processes IQ error responses when trying to fetch a custom smiley. A remote client could send a specially crafted IQ error response that would crash Pidgin. (CVE-2009-3085) A NULL pointer dereference flaw was found in the way the Pidgin IRC protocol plug-in handles IRC topics. A malicious IRC server could send a specially crafted IRC TOPIC message, which once received by Pidgin, would lead to a denial of service (Pidgin crash). (CVE-2009-2703) It was discovered that, when connecting to certain, very old Jabber servers via XMPP, Pidgin may ignore the
    last seen2020-06-01
    modified2020-06-02
    plugin id60668
    published2012-08-01
    reporterThis script is Copyright (C) 2012-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/60668
    titleScientific Linux Security Update : pidgin on SL4.x, SL5.x i386/x86_64
    code
    #%NASL_MIN_LEVEL 80502
    #
    # (C) Tenable Network Security, Inc.
    #
    # The descriptive text is (C) Scientific Linux.
    #
    
    include("compat.inc");
    
    if (description)
    {
      script_id(60668);
      script_version("1.6");
      script_cvs_date("Date: 2019/10/25 13:36:18");
    
      script_cve_id("CVE-2009-2703", "CVE-2009-3026", "CVE-2009-3083", "CVE-2009-3085");
    
      script_name(english:"Scientific Linux Security Update : pidgin on SL4.x, SL5.x i386/x86_64");
      script_summary(english:"Checks rpm output for the updated packages");
    
      script_set_attribute(
        attribute:"synopsis", 
        value:
    "The remote Scientific Linux host is missing one or more security
    updates."
      );
      script_set_attribute(
        attribute:"description", 
        value:
    "CVE-2009-3026 pidgin: ignores SSL/TLS requirements with old jabber
    servers
    
    CVE-2009-2703 Pidgin: NULL pointer dereference by handling IRC
    topic(s) (DoS)
    
    CVE-2009-3083 Pidgin: NULL pointer dereference by processing
    incomplete MSN SLP invite (DoS)
    
    CVE-2009-3085 Pidgin: NULL pointer dereference by processing a custom
    smiley (DoS)
    
    A NULL pointer dereference flaw was found in the way the Pidgin XMPP
    protocol plug-in processes IQ error responses when trying to fetch a
    custom smiley. A remote client could send a specially crafted IQ error
    response that would crash Pidgin. (CVE-2009-3085)
    
    A NULL pointer dereference flaw was found in the way the Pidgin IRC
    protocol plug-in handles IRC topics. A malicious IRC server could send
    a specially crafted IRC TOPIC message, which once received by Pidgin,
    would lead to a denial of service (Pidgin crash). (CVE-2009-2703)
    
    It was discovered that, when connecting to certain, very old Jabber
    servers via XMPP, Pidgin may ignore the 'Require SSL/TLS' setting. In
    these situations, a non-encrypted connection is established rather
    than the connection failing, causing the user to believe they are
    using an encrypted connection when they are not, leading to sensitive
    information disclosure (session sniffing). (CVE-2009-3026)
    
    A NULL pointer dereference flaw was found in the way the Pidgin MSN
    protocol plug-in handles improper MSNSLP invitations. A remote
    attacker could send a specially crafted MSNSLP invitation request,
    which once accepted by a valid Pidgin user, would lead to a denial of
    service (Pidgin crash). (CVE-2009-3083)
    
    Pidgin must be restarted for this update to take effect."
      );
      # https://listserv.fnal.gov/scripts/wa.exe?A2=ind0909&L=scientific-linux-errata&T=0&P=2055
      script_set_attribute(
        attribute:"see_also",
        value:"http://www.nessus.org/u?4e74ec1e"
      );
      script_set_attribute(attribute:"solution", value:"Update the affected packages.");
      script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P");
      script_cwe_id(119, 310);
    
      script_set_attribute(attribute:"plugin_type", value:"local");
      script_set_attribute(attribute:"cpe", value:"x-cpe:/o:fermilab:scientific_linux");
    
      script_set_attribute(attribute:"patch_publication_date", value:"2009/09/21");
      script_set_attribute(attribute:"plugin_publication_date", value:"2012/08/01");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_copyright(english:"This script is Copyright (C) 2012-2019 and is owned by Tenable, Inc. or an Affiliate thereof.");
      script_family(english:"Scientific Linux Local Security Checks");
    
      script_dependencies("ssh_get_info.nasl");
      script_require_keys("Host/local_checks_enabled", "Host/cpu", "Host/RedHat/release", "Host/RedHat/rpm-list");
    
      exit(0);
    }
    
    
    include("audit.inc");
    include("global_settings.inc");
    include("rpm.inc");
    
    
    if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
    release = get_kb_item("Host/RedHat/release");
    if (isnull(release) || "Scientific Linux " >!< release) audit(AUDIT_HOST_NOT, "running Scientific Linux");
    if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
    
    cpu = get_kb_item("Host/cpu");
    if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
    if (cpu >!< "x86_64" && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Scientific Linux", cpu);
    
    
    flag = 0;
    if (rpm_check(release:"SL4", reference:"finch-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"SL4", reference:"finch-devel-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"SL4", reference:"libpurple-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"SL4", reference:"libpurple-devel-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"SL4", reference:"libpurple-perl-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"SL4", reference:"libpurple-tcl-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"SL4", reference:"pidgin-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"SL4", reference:"pidgin-devel-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"SL4", reference:"pidgin-perl-2.6.2-2.el4")) flag++;
    
    if (rpm_check(release:"SL5", reference:"finch-2.6.2-2.el5")) flag++;
    if (rpm_check(release:"SL5", reference:"finch-devel-2.6.2-2.el5")) flag++;
    if (rpm_check(release:"SL5", reference:"libpurple-2.6.2-2.el5")) flag++;
    if (rpm_check(release:"SL5", reference:"libpurple-devel-2.6.2-2.el5")) flag++;
    if (rpm_check(release:"SL5", reference:"libpurple-perl-2.6.2-2.el5")) flag++;
    if (rpm_check(release:"SL5", reference:"libpurple-tcl-2.6.2-2.el5")) flag++;
    if (rpm_check(release:"SL5", reference:"pidgin-2.6.2-2.el5")) flag++;
    if (rpm_check(release:"SL5", reference:"pidgin-devel-2.6.2-2.el5")) flag++;
    if (rpm_check(release:"SL5", reference:"pidgin-perl-2.6.2-2.el5")) flag++;
    
    
    if (flag)
    {
      if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());
      else security_warning(0);
      exit(0);
    }
    else audit(AUDIT_HOST_NOT, "affected");
    
  • NASL familyCentOS Local Security Checks
    NASL idCENTOS_RHSA-2009-1453.NASL
    descriptionUpdated pidgin packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. Info/Query (IQ) is an Extensible Messaging and Presence Protocol (XMPP) specific request-response mechanism. A NULL pointer dereference flaw was found in the way the Pidgin XMPP protocol plug-in processes IQ error responses when trying to fetch a custom smiley. A remote client could send a specially crafted IQ error response that would crash Pidgin. (CVE-2009-3085) A NULL pointer dereference flaw was found in the way the Pidgin IRC protocol plug-in handles IRC topics. A malicious IRC server could send a specially crafted IRC TOPIC message, which once received by Pidgin, would lead to a denial of service (Pidgin crash). (CVE-2009-2703) It was discovered that, when connecting to certain, very old Jabber servers via XMPP, Pidgin may ignore the
    last seen2020-06-01
    modified2020-06-02
    plugin id43793
    published2010-01-06
    reporterThis script is Copyright (C) 2010-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/43793
    titleCentOS 4 / 5 : pidgin (CESA-2009:1453)
    code
    #%NASL_MIN_LEVEL 80502
    #
    # (C) Tenable Network Security, Inc.
    #
    # The descriptive text and package checks in this plugin were  
    # extracted from Red Hat Security Advisory RHSA-2009:1453 and 
    # CentOS Errata and Security Advisory 2009:1453 respectively.
    #
    
    include("compat.inc");
    
    if (description)
    {
      script_id(43793);
      script_version("1.15");
      script_cvs_date("Date: 2019/10/25 13:36:05");
    
      script_cve_id("CVE-2009-2703", "CVE-2009-3026", "CVE-2009-3083", "CVE-2009-3085");
      script_bugtraq_id(36277);
      script_xref(name:"RHSA", value:"2009:1453");
    
      script_name(english:"CentOS 4 / 5 : pidgin (CESA-2009:1453)");
      script_summary(english:"Checks rpm output for the updated packages");
    
      script_set_attribute(
        attribute:"synopsis", 
        value:"The remote CentOS host is missing one or more security updates."
      );
      script_set_attribute(
        attribute:"description", 
        value:
    "Updated pidgin packages that fix several security issues are now
    available for Red Hat Enterprise Linux 4 and 5.
    
    This update has been rated as having moderate security impact by the
    Red Hat Security Response Team.
    
    Pidgin is an instant messaging program which can log in to multiple
    accounts on multiple instant messaging networks simultaneously.
    Info/Query (IQ) is an Extensible Messaging and Presence Protocol
    (XMPP) specific request-response mechanism.
    
    A NULL pointer dereference flaw was found in the way the Pidgin XMPP
    protocol plug-in processes IQ error responses when trying to fetch a
    custom smiley. A remote client could send a specially crafted IQ error
    response that would crash Pidgin. (CVE-2009-3085)
    
    A NULL pointer dereference flaw was found in the way the Pidgin IRC
    protocol plug-in handles IRC topics. A malicious IRC server could send
    a specially crafted IRC TOPIC message, which once received by Pidgin,
    would lead to a denial of service (Pidgin crash). (CVE-2009-2703)
    
    It was discovered that, when connecting to certain, very old Jabber
    servers via XMPP, Pidgin may ignore the 'Require SSL/TLS' setting. In
    these situations, a non-encrypted connection is established rather
    than the connection failing, causing the user to believe they are
    using an encrypted connection when they are not, leading to sensitive
    information disclosure (session sniffing). (CVE-2009-3026)
    
    A NULL pointer dereference flaw was found in the way the Pidgin MSN
    protocol plug-in handles improper MSNSLP invitations. A remote
    attacker could send a specially crafted MSNSLP invitation request,
    which once accepted by a valid Pidgin user, would lead to a denial of
    service (Pidgin crash). (CVE-2009-3083)
    
    These packages upgrade Pidgin to version 2.6.2. Refer to the Pidgin
    release notes for a full list of changes:
    http://developer.pidgin.im/wiki/ChangeLog
    
    All Pidgin users should upgrade to these updated packages, which
    correct these issues. Pidgin must be restarted for this update to take
    effect."
      );
      # https://lists.centos.org/pipermail/centos-announce/2009-October/016269.html
      script_set_attribute(
        attribute:"see_also",
        value:"http://www.nessus.org/u?036a931b"
      );
      # https://lists.centos.org/pipermail/centos-announce/2009-October/016270.html
      script_set_attribute(
        attribute:"see_also",
        value:"http://www.nessus.org/u?54f49da8"
      );
      # https://lists.centos.org/pipermail/centos-announce/2009-September/016169.html
      script_set_attribute(
        attribute:"see_also",
        value:"http://www.nessus.org/u?2554a627"
      );
      # https://lists.centos.org/pipermail/centos-announce/2009-September/016170.html
      script_set_attribute(
        attribute:"see_also",
        value:"http://www.nessus.org/u?f93c75f0"
      );
      script_set_attribute(
        attribute:"solution", 
        value:"Update the affected pidgin packages."
      );
      script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P");
      script_set_cvss_temporal_vector("CVSS2#E:ND/RL:OF/RC:C");
      script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
      script_set_attribute(attribute:"exploit_available", value:"false");
      script_cwe_id(119, 310);
    
      script_set_attribute(attribute:"plugin_type", value:"local");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:finch");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:finch-devel");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:libpurple");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:libpurple-devel");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:libpurple-perl");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:libpurple-tcl");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:pidgin");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:pidgin-devel");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:pidgin-perl");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:centos:centos:4");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:centos:centos:5");
    
      script_set_attribute(attribute:"vuln_publication_date", value:"2009/08/31");
      script_set_attribute(attribute:"patch_publication_date", value:"2009/10/30");
      script_set_attribute(attribute:"plugin_publication_date", value:"2010/01/06");
      script_set_attribute(attribute:"generated_plugin", value:"current");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_copyright(english:"This script is Copyright (C) 2010-2019 and is owned by Tenable, Inc. or an Affiliate thereof.");
      script_family(english:"CentOS Local Security Checks");
    
      script_dependencies("ssh_get_info.nasl");
      script_require_keys("Host/local_checks_enabled", "Host/CentOS/release", "Host/CentOS/rpm-list");
    
      exit(0);
    }
    
    
    include("audit.inc");
    include("global_settings.inc");
    include("rpm.inc");
    
    
    if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
    release = get_kb_item("Host/CentOS/release");
    if (isnull(release) || "CentOS" >!< release) audit(AUDIT_OS_NOT, "CentOS");
    os_ver = pregmatch(pattern: "CentOS(?: Linux)? release ([0-9]+)", string:release);
    if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "CentOS");
    os_ver = os_ver[1];
    if (! preg(pattern:"^(4|5)([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "CentOS 4.x / 5.x", "CentOS " + os_ver);
    
    if (!get_kb_item("Host/CentOS/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
    
    
    cpu = get_kb_item("Host/cpu");
    if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
    if ("x86_64" >!< cpu && "ia64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "CentOS", cpu);
    
    
    flag = 0;
    if (rpm_check(release:"CentOS-4", cpu:"i386", reference:"finch-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"CentOS-4", cpu:"x86_64", reference:"finch-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"CentOS-4", cpu:"i386", reference:"finch-devel-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"CentOS-4", cpu:"x86_64", reference:"finch-devel-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"CentOS-4", cpu:"i386", reference:"libpurple-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"CentOS-4", cpu:"x86_64", reference:"libpurple-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"CentOS-4", cpu:"i386", reference:"libpurple-devel-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"CentOS-4", cpu:"x86_64", reference:"libpurple-devel-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"CentOS-4", cpu:"i386", reference:"libpurple-perl-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"CentOS-4", cpu:"x86_64", reference:"libpurple-perl-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"CentOS-4", cpu:"i386", reference:"libpurple-tcl-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"CentOS-4", cpu:"x86_64", reference:"libpurple-tcl-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"CentOS-4", cpu:"i386", reference:"pidgin-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"CentOS-4", cpu:"x86_64", reference:"pidgin-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"CentOS-4", cpu:"i386", reference:"pidgin-devel-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"CentOS-4", cpu:"x86_64", reference:"pidgin-devel-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"CentOS-4", cpu:"i386", reference:"pidgin-perl-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"CentOS-4", cpu:"x86_64", reference:"pidgin-perl-2.6.2-2.el4")) flag++;
    
    if (rpm_check(release:"CentOS-5", reference:"finch-2.6.2-2.el5")) flag++;
    if (rpm_check(release:"CentOS-5", reference:"finch-devel-2.6.2-2.el5")) flag++;
    if (rpm_check(release:"CentOS-5", reference:"libpurple-2.6.2-2.el5")) flag++;
    if (rpm_check(release:"CentOS-5", reference:"libpurple-devel-2.6.2-2.el5")) flag++;
    if (rpm_check(release:"CentOS-5", reference:"libpurple-perl-2.6.2-2.el5")) flag++;
    if (rpm_check(release:"CentOS-5", reference:"libpurple-tcl-2.6.2-2.el5")) flag++;
    if (rpm_check(release:"CentOS-5", reference:"pidgin-2.6.2-2.el5")) flag++;
    if (rpm_check(release:"CentOS-5", reference:"pidgin-devel-2.6.2-2.el5")) flag++;
    if (rpm_check(release:"CentOS-5", reference:"pidgin-perl-2.6.2-2.el5")) flag++;
    
    
    if (flag)
    {
      security_report_v4(
        port       : 0,
        severity   : SECURITY_WARNING,
        extra      : rpm_report_get()
      );
      exit(0);
    }
    else
    {
      tested = pkg_tests_get();
      if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
      else audit(AUDIT_PACKAGE_NOT_INSTALLED, "finch / finch-devel / libpurple / libpurple-devel / libpurple-perl / etc");
    }
    
  • NASL familyMandriva Local Security Checks
    NASL idMANDRIVA_MDVSA-2009-230.NASL
    descriptionSecurity vulnerabilities has been identified and fixed in pidgin : The msn_slplink_process_msg function in libpurple/protocols/msn/slplink.c in libpurple, as used in Pidgin (formerly Gaim) before 2.5.9 and Adium 1.3.5 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) by sending multiple crafted SLP (aka MSNSLP) messages to trigger an overwrite of an arbitrary memory location. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2009-1376 (CVE-2009-2694). Unspecified vulnerability in Pidgin 2.6.0 allows remote attackers to cause a denial of service (crash) via a link in a Yahoo IM (CVE-2009-3025) protocols/jabber/auth.c in libpurple in Pidgin 2.6.0, and possibly other versions, does not follow the require TLS/SSL preference when connecting to older Jabber servers that do not follow the XMPP specification, which causes libpurple to connect to the server without the expected encryption and allows remote attackers to sniff sessions (CVE-2009-3026). libpurple/protocols/irc/msgs.c in the IRC protocol plugin in libpurple in Pidgin before 2.6.2 allows remote IRC servers to cause a denial of service (NULL pointer dereference and application crash) via a TOPIC message that lacks a topic string (CVE-2009-2703). The msn_slp_sip_recv function in libpurple/protocols/msn/slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an SLP invite message that lacks certain required fields, as demonstrated by a malformed message from a KMess client (CVE-2009-3083). The msn_slp_process_msg function in libpurple/protocols/msn/slpcall.c in the MSN protocol plugin in libpurple 2.6.0 and 2.6.1, as used in Pidgin before 2.6.2, allows remote attackers to cause a denial of service (application crash) via a handwritten (aka Ink) message, related to an uninitialized variable and the incorrect UTF16-LE charset name (CVE-2009-3084). The XMPP protocol plugin in libpurple in Pidgin before 2.6.2 does not properly handle an error IQ stanza during an attempted fetch of a custom smiley, which allows remote attackers to cause a denial of service (application crash) via XHTML-IM content with cid: images (CVE-2009-3085). This update provides pidgin 2.6.2, which is not vulnerable to these issues.
    last seen2020-06-01
    modified2020-06-02
    plugin id40966
    published2009-09-14
    reporterThis script is Copyright (C) 2009-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/40966
    titleMandriva Linux Security Advisory : pidgin (MDVSA-2009:230)
  • NASL familyRed Hat Local Security Checks
    NASL idREDHAT-RHSA-2009-1453.NASL
    descriptionUpdated pidgin packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. Info/Query (IQ) is an Extensible Messaging and Presence Protocol (XMPP) specific request-response mechanism. A NULL pointer dereference flaw was found in the way the Pidgin XMPP protocol plug-in processes IQ error responses when trying to fetch a custom smiley. A remote client could send a specially crafted IQ error response that would crash Pidgin. (CVE-2009-3085) A NULL pointer dereference flaw was found in the way the Pidgin IRC protocol plug-in handles IRC topics. A malicious IRC server could send a specially crafted IRC TOPIC message, which once received by Pidgin, would lead to a denial of service (Pidgin crash). (CVE-2009-2703) It was discovered that, when connecting to certain, very old Jabber servers via XMPP, Pidgin may ignore the
    last seen2020-06-01
    modified2020-06-02
    plugin id41032
    published2009-09-22
    reporterThis script is Copyright (C) 2009-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/41032
    titleRHEL 4 / 5 : pidgin (RHSA-2009:1453)

Oval

  • accepted2013-04-29T04:13:38.745-04:00
    classvulnerability
    contributors
    • nameAharon Chernin
      organizationSCAP.com, LLC
    • nameDragos Prisaca
      organizationG2, Inc.
    definition_extensions
    • commentThe operating system installed on the system is Red Hat Enterprise Linux 3
      ovaloval:org.mitre.oval:def:11782
    • commentCentOS Linux 3.x
      ovaloval:org.mitre.oval:def:16651
    • commentThe operating system installed on the system is Red Hat Enterprise Linux 4
      ovaloval:org.mitre.oval:def:11831
    • commentCentOS Linux 4.x
      ovaloval:org.mitre.oval:def:16636
    • commentOracle Linux 4.x
      ovaloval:org.mitre.oval:def:15990
    • commentThe operating system installed on the system is Red Hat Enterprise Linux 5
      ovaloval:org.mitre.oval:def:11414
    • commentThe operating system installed on the system is CentOS Linux 5.x
      ovaloval:org.mitre.oval:def:15802
    • commentOracle Linux 5.x
      ovaloval:org.mitre.oval:def:15459
    descriptionlibpurple/protocols/irc/msgs.c in the IRC protocol plugin in libpurple in Pidgin before 2.6.2 allows remote IRC servers to cause a denial of service (NULL pointer dereference and application crash) via a TOPIC message that lacks a topic string.
    familyunix
    idoval:org.mitre.oval:def:11379
    statusaccepted
    submitted2010-07-09T03:56:16-04:00
    titlelibpurple/protocols/irc/msgs.c in the IRC protocol plugin in libpurple in Pidgin before 2.6.2 allows remote IRC servers to cause a denial of service (NULL pointer dereference and application crash) via a TOPIC message that lacks a topic string.
    version27
  • accepted2013-09-09T04:03:44.423-04:00
    classvulnerability
    contributors
    • nameChandan S
      organizationSecPod Technologies
    • nameShane Shaffer
      organizationG2, Inc.
    definition_extensions
    commentPidgin is installed
    ovaloval:org.mitre.oval:def:12366
    descriptionlibpurple/protocols/irc/msgs.c in the IRC protocol plugin in libpurple in Pidgin before 2.6.2 allows remote IRC servers to cause a denial of service (NULL pointer dereference and application crash) via a TOPIC message that lacks a topic string.
    familywindows
    idoval:org.mitre.oval:def:6435
    statusaccepted
    submitted2009-09-24T01:41:17
    titlePidgin before 2.6.2 allow denial of service via TOPIC message
    version4

Redhat

rpms
  • finch-0:2.6.2-2.el4
  • finch-0:2.6.2-2.el5
  • finch-devel-0:2.6.2-2.el4
  • finch-devel-0:2.6.2-2.el5
  • libpurple-0:2.6.2-2.el4
  • libpurple-0:2.6.2-2.el5
  • libpurple-devel-0:2.6.2-2.el4
  • libpurple-devel-0:2.6.2-2.el5
  • libpurple-perl-0:2.6.2-2.el4
  • libpurple-perl-0:2.6.2-2.el5
  • libpurple-tcl-0:2.6.2-2.el4
  • libpurple-tcl-0:2.6.2-2.el5
  • pidgin-0:2.6.2-2.el4
  • pidgin-0:2.6.2-2.el5
  • pidgin-debuginfo-0:2.6.2-2.el4
  • pidgin-debuginfo-0:2.6.2-2.el5
  • pidgin-devel-0:2.6.2-2.el4
  • pidgin-devel-0:2.6.2-2.el5
  • pidgin-perl-0:2.6.2-2.el4
  • pidgin-perl-0:2.6.2-2.el5
  • pidgin-0:1.5.1-6.el3
  • pidgin-debuginfo-0:1.5.1-6.el3

Seebug

bulletinFamilyexploit
descriptionBUGTRAQ ID: 36277 CVE(CAN) ID: CVE-2009-2703 Pidgin是支持多种协议的即时通讯客户端。 远程攻击者可以通过向Pidgin的libpurple库提交各种恶意会话消息导致拒绝服务。 1) XMPP协议实现中的错误可能在将恶意的表情符号处理为出错响应时导致崩溃。 2) MSN协议实现中转换硬写入消息的编码时存在错误,如果错误的使用了未初始化的变量就可能导致崩溃。 3) MSN协议插件从入站的SLP invite消息中获得某些字段,如果其中缺少某些字段协议插件就会试图引用空指针,导致崩溃。 4) IRC协议处理中存在空指针引用,从恶意的IRC服务器接收到特制的IRC TOPIC消息就会导致拒绝服务。 Pidgin 2.x 厂商补丁: Pidgin ------ 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载: http://developer.pidgin.im/viewmtn/revision/info/fd5955618eddcd84d522b30ff11102f9601f38c8 http://developer.pidgin.im/viewmtn/revision/info/567e16cbc46168f52482e5ec27626c48e7a5ba95 http://developer.pidgin.im/viewmtn/revision/info/b4a95ea62b81a06ffc1993912471c511b786efdd http://developer.pidgin.im/viewmtn/revision/info/ad2c6ee53ec9122b25aeb1f918db53be69bdeac3
idSSV:12234
last seen2017-11-19
modified2009-09-08
published2009-09-08
reporterRoot
titlePidgin Libpurple库多个拒绝服务漏洞