Vulnerabilities > CVE-2009-3085 - Denial of Service vulnerability in Pidgin Libpurple and Pidgin

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
PARTIAL
network
low complexity
pidgin
nessus

Summary

The XMPP protocol plugin in libpurple in Pidgin before 2.6.2 does not properly handle an error IQ stanza during an attempted fetch of a custom smiley, which allows remote attackers to cause a denial of service (application crash) via XHTML-IM content with cid: images.

Nessus

  • NASL familySuSE Local Security Checks
    NASL idSUSE_11_FINCH-090221.NASL
    descriptionThis update of pidgin fixes the following issues : - Allowed to send confidential data unencrypted even if SSL was chosen by user. (CVE-2009-3026: CVSS v2 Base Score: 5.0) - Remote denial of service in yahoo IM plug-in. (CVE-2009-3025: CVSS v2 Base Score: 4.3) - Remote denial of service in MSN plug-in. (CVE-2009-3083: CVSS v2 Base Score: 5.0) - Remote denial of service in MSN plug-in. (CVE-2009-3084: CVSS v2 Base Score: 5.0) - Remote denial of service in XMPP plug-in. (CVE-2009-3085: CVSS v2 Base Score: 5.0) - Remote denial of service in ICQ plug-in. (CVE-2009-3615: CVSS v2 Base Score: 5.0)
    last seen2020-06-01
    modified2020-06-02
    plugin id42989
    published2009-12-03
    reporterThis script is Copyright (C) 2009-2019 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/42989
    titleSuSE 11 Security Update : pidgin (SAT Patch Number 1604)
    code
    #%NASL_MIN_LEVEL 80502
    #
    # (C) Tenable Network Security, Inc.
    #
    # The descriptive text and package checks in this plugin were  
    # extracted from SuSE 11 update information. The text itself is
    # copyright (C) Novell, Inc.
    #
    
    if (NASL_LEVEL < 3000) exit(0);
    
    include("compat.inc");
    
    if (description)
    {
      script_id(42989);
      script_version("1.11");
      script_cvs_date("Date: 2019/10/25 13:36:35");
    
      script_cve_id("CVE-2009-3025", "CVE-2009-3026", "CVE-2009-3083", "CVE-2009-3084", "CVE-2009-3085", "CVE-2009-3615");
    
      script_name(english:"SuSE 11 Security Update : pidgin (SAT Patch Number 1604)");
      script_summary(english:"Checks rpm output for the updated packages");
    
      script_set_attribute(
        attribute:"synopsis", 
        value:"The remote SuSE 11 host is missing one or more security updates."
      );
      script_set_attribute(
        attribute:"description", 
        value:
    "This update of pidgin fixes the following issues :
    
      - Allowed to send confidential data unencrypted even if
        SSL was chosen by user. (CVE-2009-3026: CVSS v2 Base
        Score: 5.0)
    
      - Remote denial of service in yahoo IM plug-in.
        (CVE-2009-3025: CVSS v2 Base Score: 4.3)
    
      - Remote denial of service in MSN plug-in. (CVE-2009-3083:
        CVSS v2 Base Score: 5.0)
    
      - Remote denial of service in MSN plug-in. (CVE-2009-3084:
        CVSS v2 Base Score: 5.0)
    
      - Remote denial of service in XMPP plug-in.
        (CVE-2009-3085: CVSS v2 Base Score: 5.0)
    
      - Remote denial of service in ICQ plug-in. (CVE-2009-3615:
        CVSS v2 Base Score: 5.0)"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://bugzilla.novell.com/show_bug.cgi?id=535570"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://bugzilla.novell.com/show_bug.cgi?id=535832"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://bugzilla.novell.com/show_bug.cgi?id=536602"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://bugzilla.novell.com/show_bug.cgi?id=548072"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"http://support.novell.com/security/cve/CVE-2009-3025.html"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"http://support.novell.com/security/cve/CVE-2009-3026.html"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"http://support.novell.com/security/cve/CVE-2009-3083.html"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"http://support.novell.com/security/cve/CVE-2009-3084.html"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"http://support.novell.com/security/cve/CVE-2009-3085.html"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"http://support.novell.com/security/cve/CVE-2009-3615.html"
      );
      script_set_attribute(attribute:"solution", value:"Apply SAT patch number 1604.");
      script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N");
      script_cwe_id(20, 119, 310, 399);
    
      script_set_attribute(attribute:"plugin_type", value:"local");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:11:cdparanoia");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:11:cdparanoia-32bit");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:11:desktop-file-utils");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:11:fam");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:11:fam-32bit");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:11:finch");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:11:gnome-vfs2");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:11:gnome-vfs2-32bit");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:11:gstreamer-0_10");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:11:gstreamer-0_10-32bit");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:11:libogg0");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:11:libogg0-32bit");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:11:liboil");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:11:liboil-32bit");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:11:libpurple");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:11:libpurple-lang");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:11:pidgin");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:11:pidgin-otr");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:novell:suse_linux:11");
    
      script_set_attribute(attribute:"patch_publication_date", value:"2009/02/21");
      script_set_attribute(attribute:"plugin_publication_date", value:"2009/12/03");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_copyright(english:"This script is Copyright (C) 2009-2019 Tenable Network Security, Inc.");
      script_family(english:"SuSE Local Security Checks");
    
      script_dependencies("ssh_get_info.nasl");
      script_require_keys("Host/local_checks_enabled", "Host/cpu", "Host/SuSE/release", "Host/SuSE/rpm-list");
    
      exit(0);
    }
    
    
    include("audit.inc");
    include("global_settings.inc");
    include("rpm.inc");
    
    
    if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
    release = get_kb_item("Host/SuSE/release");
    if (isnull(release) || release !~ "^(SLED|SLES)11") audit(AUDIT_OS_NOT, "SuSE 11");
    if (!get_kb_item("Host/SuSE/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
    
    cpu = get_kb_item("Host/cpu");
    if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
    if (cpu !~ "^i[3-6]86$" && "x86_64" >!< cpu && "s390x" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "SuSE 11", cpu);
    
    pl = get_kb_item("Host/SuSE/patchlevel");
    if (pl) audit(AUDIT_OS_NOT, "SuSE 11.0");
    
    
    flag = 0;
    if (rpm_check(release:"SLED11", sp:0, cpu:"i586", reference:"cdparanoia-IIIalpha9.8-691.22")) flag++;
    if (rpm_check(release:"SLED11", sp:0, cpu:"i586", reference:"desktop-file-utils-0.15-1.29")) flag++;
    if (rpm_check(release:"SLED11", sp:0, cpu:"i586", reference:"fam-2.7.0-130.21")) flag++;
    if (rpm_check(release:"SLED11", sp:0, cpu:"i586", reference:"finch-2.6.3-0.1.1")) flag++;
    if (rpm_check(release:"SLED11", sp:0, cpu:"i586", reference:"gnome-vfs2-2.24.0-7.4")) flag++;
    if (rpm_check(release:"SLED11", sp:0, cpu:"i586", reference:"gstreamer-0_10-0.10.21-3.20")) flag++;
    if (rpm_check(release:"SLED11", sp:0, cpu:"i586", reference:"libogg0-1.1.3-87.12")) flag++;
    if (rpm_check(release:"SLED11", sp:0, cpu:"i586", reference:"liboil-0.3.15-3.10")) flag++;
    if (rpm_check(release:"SLED11", sp:0, cpu:"i586", reference:"libpurple-2.6.3-0.1.1")) flag++;
    if (rpm_check(release:"SLED11", sp:0, cpu:"i586", reference:"libpurple-lang-2.6.3-0.1.1")) flag++;
    if (rpm_check(release:"SLED11", sp:0, cpu:"i586", reference:"pidgin-2.6.3-0.1.1")) flag++;
    if (rpm_check(release:"SLED11", sp:0, cpu:"i586", reference:"pidgin-otr-3.2.0-1.36.1")) flag++;
    if (rpm_check(release:"SLED11", sp:0, cpu:"x86_64", reference:"cdparanoia-IIIalpha9.8-691.22")) flag++;
    if (rpm_check(release:"SLED11", sp:0, cpu:"x86_64", reference:"cdparanoia-32bit-IIIalpha9.8-691.22")) flag++;
    if (rpm_check(release:"SLED11", sp:0, cpu:"x86_64", reference:"desktop-file-utils-0.15-1.29")) flag++;
    if (rpm_check(release:"SLED11", sp:0, cpu:"x86_64", reference:"fam-2.7.0-130.21")) flag++;
    if (rpm_check(release:"SLED11", sp:0, cpu:"x86_64", reference:"fam-32bit-2.7.0-130.21")) flag++;
    if (rpm_check(release:"SLED11", sp:0, cpu:"x86_64", reference:"finch-2.6.3-0.1.1")) flag++;
    if (rpm_check(release:"SLED11", sp:0, cpu:"x86_64", reference:"gnome-vfs2-2.24.0-7.4")) flag++;
    if (rpm_check(release:"SLED11", sp:0, cpu:"x86_64", reference:"gnome-vfs2-32bit-2.24.0-7.4")) flag++;
    if (rpm_check(release:"SLED11", sp:0, cpu:"x86_64", reference:"gstreamer-0_10-0.10.21-3.20")) flag++;
    if (rpm_check(release:"SLED11", sp:0, cpu:"x86_64", reference:"gstreamer-0_10-32bit-0.10.21-3.20")) flag++;
    if (rpm_check(release:"SLED11", sp:0, cpu:"x86_64", reference:"libogg0-1.1.3-87.12")) flag++;
    if (rpm_check(release:"SLED11", sp:0, cpu:"x86_64", reference:"libogg0-32bit-1.1.3-87.12")) flag++;
    if (rpm_check(release:"SLED11", sp:0, cpu:"x86_64", reference:"liboil-0.3.15-3.10")) flag++;
    if (rpm_check(release:"SLED11", sp:0, cpu:"x86_64", reference:"liboil-32bit-0.3.15-3.10")) flag++;
    if (rpm_check(release:"SLED11", sp:0, cpu:"x86_64", reference:"libpurple-2.6.3-0.1.1")) flag++;
    if (rpm_check(release:"SLED11", sp:0, cpu:"x86_64", reference:"libpurple-lang-2.6.3-0.1.1")) flag++;
    if (rpm_check(release:"SLED11", sp:0, cpu:"x86_64", reference:"pidgin-2.6.3-0.1.1")) flag++;
    if (rpm_check(release:"SLED11", sp:0, cpu:"x86_64", reference:"pidgin-otr-3.2.0-1.36.1")) flag++;
    if (rpm_check(release:"SLES11", sp:0, reference:"cdparanoia-IIIalpha9.8-691.22")) flag++;
    if (rpm_check(release:"SLES11", sp:0, reference:"desktop-file-utils-0.15-1.29")) flag++;
    if (rpm_check(release:"SLES11", sp:0, reference:"fam-2.7.0-130.21")) flag++;
    if (rpm_check(release:"SLES11", sp:0, reference:"gnome-vfs2-2.24.0-7.4")) flag++;
    if (rpm_check(release:"SLES11", sp:0, reference:"gstreamer-0_10-0.10.21-3.20")) flag++;
    if (rpm_check(release:"SLES11", sp:0, reference:"libogg0-1.1.3-87.12")) flag++;
    if (rpm_check(release:"SLES11", sp:0, reference:"liboil-0.3.15-3.10")) flag++;
    if (rpm_check(release:"SLES11", sp:0, cpu:"s390x", reference:"cdparanoia-32bit-IIIalpha9.8-691.22")) flag++;
    if (rpm_check(release:"SLES11", sp:0, cpu:"s390x", reference:"fam-32bit-2.7.0-130.21")) flag++;
    if (rpm_check(release:"SLES11", sp:0, cpu:"s390x", reference:"gnome-vfs2-32bit-2.24.0-7.4")) flag++;
    if (rpm_check(release:"SLES11", sp:0, cpu:"s390x", reference:"libogg0-32bit-1.1.3-87.12")) flag++;
    if (rpm_check(release:"SLES11", sp:0, cpu:"s390x", reference:"liboil-32bit-0.3.15-3.10")) flag++;
    if (rpm_check(release:"SLES11", sp:0, cpu:"x86_64", reference:"cdparanoia-32bit-IIIalpha9.8-691.22")) flag++;
    if (rpm_check(release:"SLES11", sp:0, cpu:"x86_64", reference:"fam-32bit-2.7.0-130.21")) flag++;
    if (rpm_check(release:"SLES11", sp:0, cpu:"x86_64", reference:"gnome-vfs2-32bit-2.24.0-7.4")) flag++;
    if (rpm_check(release:"SLES11", sp:0, cpu:"x86_64", reference:"libogg0-32bit-1.1.3-87.12")) flag++;
    if (rpm_check(release:"SLES11", sp:0, cpu:"x86_64", reference:"liboil-32bit-0.3.15-3.10")) flag++;
    
    
    if (flag)
    {
      if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());
      else security_warning(0);
      exit(0);
    }
    else audit(AUDIT_HOST_NOT, "affected");
    
  • NASL familySuSE Local Security Checks
    NASL idSUSE_FINCH-6709.NASL
    descriptionThis update of pidgin fixes the following issues : - Allowed to send confidential data unencrypted even if SSL was chosen by user. (CVE-2009-3026: CVSS v2 Base Score: 5.0) - Remote denial of service in yahoo IM plug-in. (CVE-2009-3025: CVSS v2 Base Score: 4.3) - Remote denial of service in MSN plug-in. (CVE-2009-3083: CVSS v2 Base Score: 5.0) - Remote denial of service in MSN plug-in. (CVE-2009-3084: CVSS v2 Base Score: 5.0) - Remote denial of service in XMPP plug-in. (CVE-2009-3085: CVSS v2 Base Score: 5.0) - Remote denial of service in ICQ plug-in. (CVE-2009-3615: CVSS v2 Base Score: 5.0) - QQ protocol upgrade Migrate all QQ accounts to QQ2008.
    last seen2020-06-01
    modified2020-06-02
    plugin id51725
    published2011-01-27
    reporterThis script is Copyright (C) 2011-2019 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/51725
    titleSuSE 10 Security Update : pidgin (ZYPP Patch Number 6709)
    code
    #%NASL_MIN_LEVEL 80502
    #
    # (C) Tenable Network Security, Inc.
    #
    # The text description of this plugin is (C) Novell, Inc.
    #
    
    include("compat.inc");
    
    if (description)
    {
      script_id(51725);
      script_version ("1.6");
      script_cvs_date("Date: 2019/10/25 13:36:36");
    
      script_cve_id("CVE-2009-3025", "CVE-2009-3026", "CVE-2009-3083", "CVE-2009-3084", "CVE-2009-3085", "CVE-2009-3615");
    
      script_name(english:"SuSE 10 Security Update : pidgin (ZYPP Patch Number 6709)");
      script_summary(english:"Checks rpm output for the updated packages");
    
      script_set_attribute(
        attribute:"synopsis", 
        value:"The remote SuSE 10 host is missing a security-related patch."
      );
      script_set_attribute(
        attribute:"description", 
        value:
    "This update of pidgin fixes the following issues :
    
      - Allowed to send confidential data unencrypted even if
        SSL was chosen by user. (CVE-2009-3026: CVSS v2 Base
        Score: 5.0)
    
      - Remote denial of service in yahoo IM plug-in.
        (CVE-2009-3025: CVSS v2 Base Score: 4.3)
    
      - Remote denial of service in MSN plug-in. (CVE-2009-3083:
        CVSS v2 Base Score: 5.0)
    
      - Remote denial of service in MSN plug-in. (CVE-2009-3084:
        CVSS v2 Base Score: 5.0)
    
      - Remote denial of service in XMPP plug-in.
        (CVE-2009-3085: CVSS v2 Base Score: 5.0)
    
      - Remote denial of service in ICQ plug-in. (CVE-2009-3615:
        CVSS v2 Base Score: 5.0)
    
      - QQ protocol upgrade Migrate all QQ accounts to QQ2008."
      );
      script_set_attribute(
        attribute:"see_also",
        value:"http://support.novell.com/security/cve/CVE-2009-3025.html"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"http://support.novell.com/security/cve/CVE-2009-3026.html"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"http://support.novell.com/security/cve/CVE-2009-3083.html"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"http://support.novell.com/security/cve/CVE-2009-3084.html"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"http://support.novell.com/security/cve/CVE-2009-3085.html"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"http://support.novell.com/security/cve/CVE-2009-3615.html"
      );
      script_set_attribute(attribute:"solution", value:"Apply ZYPP patch number 6709.");
      script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N");
      script_cwe_id(20, 119, 310, 399);
    
      script_set_attribute(attribute:"plugin_type", value:"local");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:suse:suse_linux");
    
      script_set_attribute(attribute:"patch_publication_date", value:"2009/12/07");
      script_set_attribute(attribute:"plugin_publication_date", value:"2011/01/27");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_copyright(english:"This script is Copyright (C) 2011-2019 Tenable Network Security, Inc.");
      script_family(english:"SuSE Local Security Checks");
    
      script_dependencies("ssh_get_info.nasl");
      script_require_keys("Host/local_checks_enabled", "Host/cpu", "Host/SuSE/release", "Host/SuSE/rpm-list");
    
      exit(0);
    }
    
    
    include("global_settings.inc");
    include("rpm.inc");
    
    
    if (!get_kb_item("Host/local_checks_enabled")) exit(0, "Local checks are not enabled.");
    if (!get_kb_item("Host/SuSE/release")) exit(0, "The host is not running SuSE.");
    if (!get_kb_item("Host/SuSE/rpm-list")) exit(1, "Could not obtain the list of installed packages.");
    
    cpu = get_kb_item("Host/cpu");
    if (isnull(cpu)) exit(1, "Failed to determine the architecture type.");
    if (cpu >!< "x86_64" && cpu !~ "^i[3-6]86$") exit(1, "Local checks for SuSE 10 on the '"+cpu+"' architecture have not been implemented.");
    
    
    flag = 0;
    if (rpm_check(release:"SLED10", sp:2, reference:"finch-2.6.3-0.4.2")) flag++;
    if (rpm_check(release:"SLED10", sp:2, reference:"libpurple-2.6.3-0.4.2")) flag++;
    if (rpm_check(release:"SLED10", sp:2, reference:"pidgin-2.6.3-0.4.2")) flag++;
    
    
    if (flag)
    {
      if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());
      else security_warning(0);
      exit(0);
    }
    else exit(0, "The host is not affected.");
    
  • NASL familyOracle Linux Local Security Checks
    NASL idORACLELINUX_ELSA-2009-1453.NASL
    descriptionFrom Red Hat Security Advisory 2009:1453 : Updated pidgin packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. Info/Query (IQ) is an Extensible Messaging and Presence Protocol (XMPP) specific request-response mechanism. A NULL pointer dereference flaw was found in the way the Pidgin XMPP protocol plug-in processes IQ error responses when trying to fetch a custom smiley. A remote client could send a specially crafted IQ error response that would crash Pidgin. (CVE-2009-3085) A NULL pointer dereference flaw was found in the way the Pidgin IRC protocol plug-in handles IRC topics. A malicious IRC server could send a specially crafted IRC TOPIC message, which once received by Pidgin, would lead to a denial of service (Pidgin crash). (CVE-2009-2703) It was discovered that, when connecting to certain, very old Jabber servers via XMPP, Pidgin may ignore the
    last seen2020-06-01
    modified2020-06-02
    plugin id67928
    published2013-07-12
    reporterThis script is Copyright (C) 2013-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/67928
    titleOracle Linux 4 : pidgin (ELSA-2009-1453)
    code
    #%NASL_MIN_LEVEL 80502
    #
    # (C) Tenable Network Security, Inc.
    #
    # The descriptive text and package checks in this plugin were
    # extracted from Red Hat Security Advisory RHSA-2009:1453 and 
    # Oracle Linux Security Advisory ELSA-2009-1453 respectively.
    #
    
    include("compat.inc");
    
    if (description)
    {
      script_id(67928);
      script_version("1.9");
      script_cvs_date("Date: 2019/10/25 13:36:08");
    
      script_cve_id("CVE-2009-2703", "CVE-2009-3026", "CVE-2009-3083", "CVE-2009-3085");
      script_bugtraq_id(36277);
      script_xref(name:"RHSA", value:"2009:1453");
    
      script_name(english:"Oracle Linux 4 : pidgin (ELSA-2009-1453)");
      script_summary(english:"Checks rpm output for the updated packages");
    
      script_set_attribute(
        attribute:"synopsis", 
        value:"The remote Oracle Linux host is missing one or more security updates."
      );
      script_set_attribute(
        attribute:"description", 
        value:
    "From Red Hat Security Advisory 2009:1453 :
    
    Updated pidgin packages that fix several security issues are now
    available for Red Hat Enterprise Linux 4 and 5.
    
    This update has been rated as having moderate security impact by the
    Red Hat Security Response Team.
    
    Pidgin is an instant messaging program which can log in to multiple
    accounts on multiple instant messaging networks simultaneously.
    Info/Query (IQ) is an Extensible Messaging and Presence Protocol
    (XMPP) specific request-response mechanism.
    
    A NULL pointer dereference flaw was found in the way the Pidgin XMPP
    protocol plug-in processes IQ error responses when trying to fetch a
    custom smiley. A remote client could send a specially crafted IQ error
    response that would crash Pidgin. (CVE-2009-3085)
    
    A NULL pointer dereference flaw was found in the way the Pidgin IRC
    protocol plug-in handles IRC topics. A malicious IRC server could send
    a specially crafted IRC TOPIC message, which once received by Pidgin,
    would lead to a denial of service (Pidgin crash). (CVE-2009-2703)
    
    It was discovered that, when connecting to certain, very old Jabber
    servers via XMPP, Pidgin may ignore the 'Require SSL/TLS' setting. In
    these situations, a non-encrypted connection is established rather
    than the connection failing, causing the user to believe they are
    using an encrypted connection when they are not, leading to sensitive
    information disclosure (session sniffing). (CVE-2009-3026)
    
    A NULL pointer dereference flaw was found in the way the Pidgin MSN
    protocol plug-in handles improper MSNSLP invitations. A remote
    attacker could send a specially crafted MSNSLP invitation request,
    which once accepted by a valid Pidgin user, would lead to a denial of
    service (Pidgin crash). (CVE-2009-3083)
    
    These packages upgrade Pidgin to version 2.6.2. Refer to the Pidgin
    release notes for a full list of changes:
    http://developer.pidgin.im/wiki/ChangeLog
    
    All Pidgin users should upgrade to these updated packages, which
    correct these issues. Pidgin must be restarted for this update to take
    effect."
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://oss.oracle.com/pipermail/el-errata/2009-September/001159.html"
      );
      script_set_attribute(
        attribute:"solution", 
        value:"Update the affected pidgin packages."
      );
      script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P");
      script_set_cvss_temporal_vector("CVSS2#E:ND/RL:OF/RC:C");
      script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
      script_set_attribute(attribute:"exploit_available", value:"false");
      script_cwe_id(119, 310);
    
      script_set_attribute(attribute:"plugin_type", value:"local");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:finch");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:finch-devel");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libpurple");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libpurple-devel");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libpurple-perl");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:libpurple-tcl");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:pidgin");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:pidgin-devel");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:pidgin-perl");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:oracle:linux:4");
    
      script_set_attribute(attribute:"vuln_publication_date", value:"2009/08/31");
      script_set_attribute(attribute:"patch_publication_date", value:"2009/09/21");
      script_set_attribute(attribute:"plugin_publication_date", value:"2013/07/12");
      script_set_attribute(attribute:"generated_plugin", value:"current");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_copyright(english:"This script is Copyright (C) 2013-2019 and is owned by Tenable, Inc. or an Affiliate thereof.");
      script_family(english:"Oracle Linux Local Security Checks");
    
      script_dependencies("ssh_get_info.nasl");
      script_require_keys("Host/local_checks_enabled", "Host/OracleLinux", "Host/RedHat/release", "Host/RedHat/rpm-list");
    
      exit(0);
    }
    
    
    include("audit.inc");
    include("global_settings.inc");
    include("rpm.inc");
    
    
    if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
    if (!get_kb_item("Host/OracleLinux")) audit(AUDIT_OS_NOT, "Oracle Linux");
    release = get_kb_item("Host/RedHat/release");
    if (isnull(release) || !pregmatch(pattern: "Oracle (?:Linux Server|Enterprise Linux)", string:release)) audit(AUDIT_OS_NOT, "Oracle Linux");
    os_ver = pregmatch(pattern: "Oracle (?:Linux Server|Enterprise Linux) .*release ([0-9]+(\.[0-9]+)?)", string:release);
    if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Oracle Linux");
    os_ver = os_ver[1];
    if (! preg(pattern:"^4([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Oracle Linux 4", "Oracle Linux " + os_ver);
    
    if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
    
    cpu = get_kb_item("Host/cpu");
    if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
    if ("x86_64" >!< cpu && "ia64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Oracle Linux", cpu);
    
    flag = 0;
    if (rpm_check(release:"EL4", reference:"finch-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"EL4", reference:"finch-devel-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"EL4", reference:"libpurple-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"EL4", reference:"libpurple-devel-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"EL4", reference:"libpurple-perl-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"EL4", reference:"libpurple-tcl-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"EL4", reference:"pidgin-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"EL4", reference:"pidgin-devel-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"EL4", reference:"pidgin-perl-2.6.2-2.el4")) flag++;
    
    
    if (flag)
    {
      if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());
      else security_warning(0);
      exit(0);
    }
    else
    {
      tested = pkg_tests_get();
      if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
      else audit(AUDIT_PACKAGE_NOT_INSTALLED, "finch / finch-devel / libpurple / libpurple-devel / libpurple-perl / etc");
    }
    
  • NASL familyUbuntu Local Security Checks
    NASL idUBUNTU_USN-886-1.NASL
    descriptionIt was discovered that Pidgin did not properly handle certain topic messages in the IRC protocol handler. If a user were tricked into connecting to a malicious IRC server, an attacker could cause Pidgin to crash, leading to a denial of service. This issue only affected Ubuntu 8.04 LTS, Ubuntu 8.10 and Ubuntu 9.04. (CVE-2009-2703) It was discovered that Pidgin did not properly enforce the
    last seen2020-06-01
    modified2020-06-02
    plugin id44057
    published2010-01-19
    reporterUbuntu Security Notice (C) 2010-2019 Canonical, Inc. / NASL script (C) 2010-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/44057
    titleUbuntu 8.04 LTS / 8.10 / 9.04 / 9.10 : pidgin vulnerabilities (USN-886-1)
    code
    #
    # (C) Tenable Network Security, Inc.
    #
    # The descriptive text and package checks in this plugin were
    # extracted from Ubuntu Security Notice USN-886-1. The text 
    # itself is copyright (C) Canonical, Inc. See 
    # <http://www.ubuntu.com/usn/>. Ubuntu(R) is a registered 
    # trademark of Canonical, Inc.
    #
    
    include("compat.inc");
    
    if (description)
    {
      script_id(44057);
      script_version("1.18");
      script_cvs_date("Date: 2019/09/19 12:54:26");
    
      script_cve_id("CVE-2008-2955", "CVE-2009-1376", "CVE-2009-2694", "CVE-2009-2703", "CVE-2009-3026", "CVE-2009-3083", "CVE-2009-3085", "CVE-2009-3615", "CVE-2010-0013");
      script_bugtraq_id(35067, 36277, 37524);
      script_xref(name:"USN", value:"886-1");
    
      script_name(english:"Ubuntu 8.04 LTS / 8.10 / 9.04 / 9.10 : pidgin vulnerabilities (USN-886-1)");
      script_summary(english:"Checks dpkg output for updated packages.");
    
      script_set_attribute(
        attribute:"synopsis", 
        value:
    "The remote Ubuntu host is missing one or more security-related
    patches."
      );
      script_set_attribute(
        attribute:"description", 
        value:
    "It was discovered that Pidgin did not properly handle certain topic
    messages in the IRC protocol handler. If a user were tricked into
    connecting to a malicious IRC server, an attacker could cause Pidgin
    to crash, leading to a denial of service. This issue only affected
    Ubuntu 8.04 LTS, Ubuntu 8.10 and Ubuntu 9.04. (CVE-2009-2703)
    
    It was discovered that Pidgin did not properly enforce the 'require
    TLS/SSL' setting when connecting to certain older Jabber servers. If a
    remote attacker were able to perform a man-in-the-middle attack, this
    flaw could be exploited to view sensitive information. This issue only
    affected Ubuntu 8.04 LTS, Ubuntu 8.10 and Ubuntu 9.04. (CVE-2009-3026)
    
    It was discovered that Pidgin did not properly handle certain SLP
    invite messages in the MSN protocol handler. A remote attacker could
    send a specially crafted invite message and cause Pidgin to crash,
    leading to a denial of service. This issue only affected Ubuntu 8.04
    LTS, Ubuntu 8.10 and Ubuntu 9.04. (CVE-2009-3083)
    
    It was discovered that Pidgin did not properly handle certain errors
    in the XMPP protocol handler. A remote attacker could send a specially
    crafted message and cause Pidgin to crash, leading to a denial of
    service. This issue only affected Ubuntu 8.10 and Ubuntu 9.04.
    (CVE-2009-3085)
    
    It was discovered that Pidgin did not properly handle malformed
    contact-list data in the OSCAR protocol handler. A remote attacker
    could send specially crafted contact-list data and cause Pidgin to
    crash, leading to a denial of service. (CVE-2009-3615)
    
    It was discovered that Pidgin did not properly handle custom smiley
    requests in the MSN protocol handler. A remote attacker could send a
    specially crafted filename in a custom smiley request and obtain
    arbitrary files via directory traversal. This issue only affected
    Ubuntu 8.10, Ubuntu 9.04 and Ubuntu 9.10. (CVE-2010-0013)
    
    Pidgin for Ubuntu 8.04 LTS was also updated to fix connection issues
    with the MSN protocol.
    
    USN-675-1 and USN-781-1 provided updated Pidgin packages to fix
    multiple security vulnerabilities in Ubuntu 8.04 LTS. The security
    patches to fix CVE-2008-2955 and CVE-2009-1376 were incomplete. This
    update corrects the problem. 
    
    It was discovered that Pidgin did not properly handle file transfers
    containing a long filename and special characters in the MSN protocol
    handler. A remote attacker could send a specially crafted filename in
    a file transfer request and cause Pidgin to crash, leading to a denial
    of service. (CVE-2008-2955)
    
    It was discovered that Pidgin did not properly handle
    certain malformed messages in the MSN protocol handler. A
    remote attacker could send a specially crafted message and
    possibly execute arbitrary code with user privileges.
    (CVE-2009-1376).
    
    Note that Tenable Network Security has extracted the preceding
    description block directly from the Ubuntu security advisory. Tenable
    has attempted to automatically clean and format it as much as possible
    without introducing additional issues."
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://usn.ubuntu.com/886-1/"
      );
      script_set_attribute(attribute:"solution", value:"Update the affected packages.");
      script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C");
      script_set_cvss_temporal_vector("CVSS2#E:F/RL:OF/RC:C");
      script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
      script_set_attribute(attribute:"exploit_available", value:"true");
      script_set_attribute(attribute:"exploit_framework_core", value:"true");
      script_cwe_id(20, 22, 119, 189, 310, 399);
    
      script_set_attribute(attribute:"plugin_type", value:"local");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:finch");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:finch-dev");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:gaim");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libpurple-bin");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libpurple-dev");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libpurple0");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:pidgin");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:pidgin-data");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:pidgin-dbg");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:pidgin-dev");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:8.04:-:lts");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:8.10");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:9.04");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:9.10");
    
      script_set_attribute(attribute:"vuln_publication_date", value:"2008/07/01");
      script_set_attribute(attribute:"patch_publication_date", value:"2010/01/18");
      script_set_attribute(attribute:"plugin_publication_date", value:"2010/01/19");
      script_set_attribute(attribute:"generated_plugin", value:"current");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_copyright(english:"Ubuntu Security Notice (C) 2010-2019 Canonical, Inc. / NASL script (C) 2010-2019 and is owned by Tenable, Inc. or an Affiliate thereof.");
      script_family(english:"Ubuntu Local Security Checks");
    
      script_dependencies("ssh_get_info.nasl");
      script_require_keys("Host/cpu", "Host/Ubuntu", "Host/Ubuntu/release", "Host/Debian/dpkg-l");
    
      exit(0);
    }
    
    
    include("audit.inc");
    include("ubuntu.inc");
    include("misc_func.inc");
    
    if ( ! get_kb_item("Host/local_checks_enabled") ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
    release = get_kb_item("Host/Ubuntu/release");
    if ( isnull(release) ) audit(AUDIT_OS_NOT, "Ubuntu");
    release = chomp(release);
    if (! preg(pattern:"^(8\.04|8\.10|9\.04|9\.10)$", string:release)) audit(AUDIT_OS_NOT, "Ubuntu 8.04 / 8.10 / 9.04 / 9.10", "Ubuntu " + release);
    if ( ! get_kb_item("Host/Debian/dpkg-l") ) audit(AUDIT_PACKAGE_LIST_MISSING);
    
    cpu = get_kb_item("Host/cpu");
    if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
    if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Ubuntu", cpu);
    
    flag = 0;
    
    if (ubuntu_check(osver:"8.04", pkgname:"finch", pkgver:"2.4.1-1ubuntu2.8")) flag++;
    if (ubuntu_check(osver:"8.04", pkgname:"finch-dev", pkgver:"2.4.1-1ubuntu2.8")) flag++;
    if (ubuntu_check(osver:"8.04", pkgname:"gaim", pkgver:"2.4.1-1ubuntu2.8")) flag++;
    if (ubuntu_check(osver:"8.04", pkgname:"libpurple-bin", pkgver:"2.4.1-1ubuntu2.8")) flag++;
    if (ubuntu_check(osver:"8.04", pkgname:"libpurple-dev", pkgver:"2.4.1-1ubuntu2.8")) flag++;
    if (ubuntu_check(osver:"8.04", pkgname:"libpurple0", pkgver:"2.4.1-1ubuntu2.8")) flag++;
    if (ubuntu_check(osver:"8.04", pkgname:"pidgin", pkgver:"1:2.4.1-1ubuntu2.8")) flag++;
    if (ubuntu_check(osver:"8.04", pkgname:"pidgin-data", pkgver:"2.4.1-1ubuntu2.8")) flag++;
    if (ubuntu_check(osver:"8.04", pkgname:"pidgin-dbg", pkgver:"2.4.1-1ubuntu2.8")) flag++;
    if (ubuntu_check(osver:"8.04", pkgname:"pidgin-dev", pkgver:"2.4.1-1ubuntu2.8")) flag++;
    if (ubuntu_check(osver:"8.10", pkgname:"finch", pkgver:"2.5.2-0ubuntu1.6")) flag++;
    if (ubuntu_check(osver:"8.10", pkgname:"finch-dev", pkgver:"2.5.2-0ubuntu1.6")) flag++;
    if (ubuntu_check(osver:"8.10", pkgname:"libpurple-bin", pkgver:"2.5.2-0ubuntu1.6")) flag++;
    if (ubuntu_check(osver:"8.10", pkgname:"libpurple-dev", pkgver:"2.5.2-0ubuntu1.6")) flag++;
    if (ubuntu_check(osver:"8.10", pkgname:"libpurple0", pkgver:"2.5.2-0ubuntu1.6")) flag++;
    if (ubuntu_check(osver:"8.10", pkgname:"pidgin", pkgver:"1:2.5.2-0ubuntu1.6")) flag++;
    if (ubuntu_check(osver:"8.10", pkgname:"pidgin-data", pkgver:"2.5.2-0ubuntu1.6")) flag++;
    if (ubuntu_check(osver:"8.10", pkgname:"pidgin-dbg", pkgver:"2.5.2-0ubuntu1.6")) flag++;
    if (ubuntu_check(osver:"8.10", pkgname:"pidgin-dev", pkgver:"2.5.2-0ubuntu1.6")) flag++;
    if (ubuntu_check(osver:"9.04", pkgname:"finch", pkgver:"2.5.5-1ubuntu8.5")) flag++;
    if (ubuntu_check(osver:"9.04", pkgname:"finch-dev", pkgver:"2.5.5-1ubuntu8.5")) flag++;
    if (ubuntu_check(osver:"9.04", pkgname:"libpurple-bin", pkgver:"2.5.5-1ubuntu8.5")) flag++;
    if (ubuntu_check(osver:"9.04", pkgname:"libpurple-dev", pkgver:"2.5.5-1ubuntu8.5")) flag++;
    if (ubuntu_check(osver:"9.04", pkgname:"libpurple0", pkgver:"2.5.5-1ubuntu8.5")) flag++;
    if (ubuntu_check(osver:"9.04", pkgname:"pidgin", pkgver:"1:2.5.5-1ubuntu8.5")) flag++;
    if (ubuntu_check(osver:"9.04", pkgname:"pidgin-data", pkgver:"2.5.5-1ubuntu8.5")) flag++;
    if (ubuntu_check(osver:"9.04", pkgname:"pidgin-dbg", pkgver:"2.5.5-1ubuntu8.5")) flag++;
    if (ubuntu_check(osver:"9.04", pkgname:"pidgin-dev", pkgver:"2.5.5-1ubuntu8.5")) flag++;
    if (ubuntu_check(osver:"9.10", pkgname:"finch", pkgver:"2.6.2-1ubuntu7.1")) flag++;
    if (ubuntu_check(osver:"9.10", pkgname:"finch-dev", pkgver:"2.6.2-1ubuntu7.1")) flag++;
    if (ubuntu_check(osver:"9.10", pkgname:"libpurple-bin", pkgver:"2.6.2-1ubuntu7.1")) flag++;
    if (ubuntu_check(osver:"9.10", pkgname:"libpurple-dev", pkgver:"2.6.2-1ubuntu7.1")) flag++;
    if (ubuntu_check(osver:"9.10", pkgname:"libpurple0", pkgver:"2.6.2-1ubuntu7.1")) flag++;
    if (ubuntu_check(osver:"9.10", pkgname:"pidgin", pkgver:"1:2.6.2-1ubuntu7.1")) flag++;
    if (ubuntu_check(osver:"9.10", pkgname:"pidgin-data", pkgver:"2.6.2-1ubuntu7.1")) flag++;
    if (ubuntu_check(osver:"9.10", pkgname:"pidgin-dbg", pkgver:"2.6.2-1ubuntu7.1")) flag++;
    if (ubuntu_check(osver:"9.10", pkgname:"pidgin-dev", pkgver:"2.6.2-1ubuntu7.1")) flag++;
    
    if (flag)
    {
      security_report_v4(
        port       : 0,
        severity   : SECURITY_HOLE,
        extra      : ubuntu_report_get()
      );
      exit(0);
    }
    else
    {
      tested = ubuntu_pkg_tests_get();
      if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
      else audit(AUDIT_PACKAGE_NOT_INSTALLED, "finch / finch-dev / gaim / libpurple-bin / libpurple-dev / etc");
    }
    
  • NASL familySuSE Local Security Checks
    NASL idSUSE_11_0_FINCH-080606.NASL
    descriptionThis update of pidgin fixes the following issues : - CVE-2009-3026: CVSS v2 Base Score: 5.0 Allowed to send confidential data unencrypted even if SSL was chosen by user. - CVE-2009-3025: CVSS v2 Base Score: 4.3 Remote denial of service in yahoo IM plug-in. - CVE-2009-3083: CVSS v2 Base Score: 5.0 Remote denial of service in MSN plug-in. - CVE-2009-3084: CVSS v2 Base Score: 5.0 Remote denial of service in MSN plug-in. - CVE-2009-3085: CVSS v2 Base Score: 5.0 Remote denial of service in XMPP plug-in. - CVE-2009-3615: CVSS v2 Base Score: 5.0 Remote denial of service in ICQ plug-in. - QQ protocol upgrade Migrate all QQ accounts to QQ2008.
    last seen2020-06-01
    modified2020-06-02
    plugin id43050
    published2009-12-08
    reporterThis script is Copyright (C) 2009-2019 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/43050
    titleopenSUSE Security Update : finch (finch-1625)
    code
    #%NASL_MIN_LEVEL 80502
    #
    # (C) Tenable Network Security, Inc.
    #
    # The descriptive text and package checks in this plugin were
    # extracted from openSUSE Security Update finch-1625.
    #
    # The text description of this plugin is (C) SUSE LLC.
    #
    
    include("compat.inc");
    
    if (description)
    {
      script_id(43050);
      script_version("1.9");
      script_cvs_date("Date: 2019/10/25 13:36:31");
    
      script_cve_id("CVE-2009-3025", "CVE-2009-3026", "CVE-2009-3083", "CVE-2009-3084", "CVE-2009-3085", "CVE-2009-3615");
    
      script_name(english:"openSUSE Security Update : finch (finch-1625)");
      script_summary(english:"Check for the finch-1625 patch");
    
      script_set_attribute(
        attribute:"synopsis", 
        value:"The remote openSUSE host is missing a security update."
      );
      script_set_attribute(
        attribute:"description", 
        value:
    "This update of pidgin fixes the following issues :
    
      - CVE-2009-3026: CVSS v2 Base Score: 5.0 Allowed to send
        confidential data unencrypted even if SSL was chosen by
        user.
    
      - CVE-2009-3025: CVSS v2 Base Score: 4.3 Remote denial of
        service in yahoo IM plug-in.
    
      - CVE-2009-3083: CVSS v2 Base Score: 5.0 Remote denial of
        service in MSN plug-in.
    
      - CVE-2009-3084: CVSS v2 Base Score: 5.0 Remote denial of
        service in MSN plug-in.
    
      - CVE-2009-3085: CVSS v2 Base Score: 5.0 Remote denial of
        service in XMPP plug-in.
    
      - CVE-2009-3615: CVSS v2 Base Score: 5.0 Remote denial of
        service in ICQ plug-in.
    
      - QQ protocol upgrade Migrate all QQ accounts to QQ2008."
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://bugzilla.novell.com/show_bug.cgi?id=535570"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://bugzilla.novell.com/show_bug.cgi?id=535832"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://bugzilla.novell.com/show_bug.cgi?id=536602"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://bugzilla.novell.com/show_bug.cgi?id=548072"
      );
      script_set_attribute(
        attribute:"solution", 
        value:"Update the affected finch packages."
      );
      script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N");
      script_cwe_id(20, 119, 310, 399);
    
      script_set_attribute(attribute:"plugin_type", value:"local");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:cdparanoia");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:cdparanoia-32bit");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:check");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:check-32bit");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:desktop-file-utils");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:fam");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:fam-32bit");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:finch");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:finch-devel");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:gnome-vfs2");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:gnome-vfs2-32bit");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:gnome-vfs2-lang");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:gstreamer-0_10");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:gstreamer-0_10-32bit");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:gstreamer-0_10-lang");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libgstreamer-0_10-0");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libgstreamer-0_10-0-32bit");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libogg0");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libogg0-32bit");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:liboil");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:liboil-32bit");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libpurple");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libpurple-devel");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libpurple-lang");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libpurple-meanwhile");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libpurple-mono");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libtheora0");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libtheora0-32bit");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libvisual");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libvisual-32bit");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libvorbis");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libvorbis-32bit");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:pidgin");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:pidgin-devel");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:pidgin-otr");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:novell:opensuse:11.0");
    
      script_set_attribute(attribute:"patch_publication_date", value:"2008/06/06");
      script_set_attribute(attribute:"plugin_publication_date", value:"2009/12/08");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_copyright(english:"This script is Copyright (C) 2009-2019 Tenable Network Security, Inc.");
      script_family(english:"SuSE Local Security Checks");
    
      script_dependencies("ssh_get_info.nasl");
      script_require_keys("Host/local_checks_enabled", "Host/SuSE/release", "Host/SuSE/rpm-list", "Host/cpu");
    
      exit(0);
    }
    
    
    include("audit.inc");
    include("global_settings.inc");
    include("rpm.inc");
    
    if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
    release = get_kb_item("Host/SuSE/release");
    if (isnull(release) || release =~ "^(SLED|SLES)") audit(AUDIT_OS_NOT, "openSUSE");
    if (release !~ "^(SUSE11\.0)$") audit(AUDIT_OS_RELEASE_NOT, "openSUSE", "11.0", release);
    if (!get_kb_item("Host/SuSE/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
    
    ourarch = get_kb_item("Host/cpu");
    if (!ourarch) audit(AUDIT_UNKNOWN_ARCH);
    if (ourarch !~ "^(i586|i686|x86_64)$") audit(AUDIT_ARCH_NOT, "i586 / i686 / x86_64", ourarch);
    
    flag = 0;
    
    if ( rpm_check(release:"SUSE11.0", reference:"cdparanoia-IIIalpha9.8-664.1") ) flag++;
    if ( rpm_check(release:"SUSE11.0", reference:"check-0.9.5-72.1") ) flag++;
    if ( rpm_check(release:"SUSE11.0", reference:"desktop-file-utils-0.15-34.1") ) flag++;
    if ( rpm_check(release:"SUSE11.0", reference:"fam-2.7.0-106.1") ) flag++;
    if ( rpm_check(release:"SUSE11.0", reference:"finch-2.6.3-0.1") ) flag++;
    if ( rpm_check(release:"SUSE11.0", reference:"finch-devel-2.6.3-0.1") ) flag++;
    if ( rpm_check(release:"SUSE11.0", reference:"gnome-vfs2-2.22.0-33.1") ) flag++;
    if ( rpm_check(release:"SUSE11.0", reference:"gnome-vfs2-lang-2.22.0-33.1") ) flag++;
    if ( rpm_check(release:"SUSE11.0", reference:"gstreamer-0_10-0.10.19-16.1") ) flag++;
    if ( rpm_check(release:"SUSE11.0", reference:"gstreamer-0_10-lang-0.10.19-16.1") ) flag++;
    if ( rpm_check(release:"SUSE11.0", reference:"libgstreamer-0_10-0-0.10.19-16.1") ) flag++;
    if ( rpm_check(release:"SUSE11.0", reference:"libogg0-1.1.3-86.1") ) flag++;
    if ( rpm_check(release:"SUSE11.0", reference:"liboil-0.3.14-18.1") ) flag++;
    if ( rpm_check(release:"SUSE11.0", reference:"libpurple-2.6.3-0.1") ) flag++;
    if ( rpm_check(release:"SUSE11.0", reference:"libpurple-devel-2.6.3-0.1") ) flag++;
    if ( rpm_check(release:"SUSE11.0", reference:"libpurple-lang-2.6.3-0.1") ) flag++;
    if ( rpm_check(release:"SUSE11.0", reference:"libpurple-meanwhile-2.6.3-0.1") ) flag++;
    if ( rpm_check(release:"SUSE11.0", reference:"libpurple-mono-2.6.3-0.1") ) flag++;
    if ( rpm_check(release:"SUSE11.0", reference:"libtheora0-1.0.beta2-3.1") ) flag++;
    if ( rpm_check(release:"SUSE11.0", reference:"libvisual-0.4.0-139.1") ) flag++;
    if ( rpm_check(release:"SUSE11.0", reference:"libvorbis-1.2.0-53.1") ) flag++;
    if ( rpm_check(release:"SUSE11.0", reference:"pidgin-2.6.3-0.1") ) flag++;
    if ( rpm_check(release:"SUSE11.0", reference:"pidgin-devel-2.6.3-0.1") ) flag++;
    if ( rpm_check(release:"SUSE11.0", reference:"pidgin-otr-3.1.0-87.1") ) flag++;
    if ( rpm_check(release:"SUSE11.0", cpu:"x86_64", reference:"cdparanoia-32bit-IIIalpha9.8-664.1") ) flag++;
    if ( rpm_check(release:"SUSE11.0", cpu:"x86_64", reference:"check-32bit-0.9.5-72.1") ) flag++;
    if ( rpm_check(release:"SUSE11.0", cpu:"x86_64", reference:"fam-32bit-2.7.0-106.1") ) flag++;
    if ( rpm_check(release:"SUSE11.0", cpu:"x86_64", reference:"gnome-vfs2-32bit-2.22.0-33.1") ) flag++;
    if ( rpm_check(release:"SUSE11.0", cpu:"x86_64", reference:"gstreamer-0_10-32bit-0.10.19-16.1") ) flag++;
    if ( rpm_check(release:"SUSE11.0", cpu:"x86_64", reference:"libgstreamer-0_10-0-32bit-0.10.19-16.1") ) flag++;
    if ( rpm_check(release:"SUSE11.0", cpu:"x86_64", reference:"libogg0-32bit-1.1.3-86.1") ) flag++;
    if ( rpm_check(release:"SUSE11.0", cpu:"x86_64", reference:"liboil-32bit-0.3.14-18.1") ) flag++;
    if ( rpm_check(release:"SUSE11.0", cpu:"x86_64", reference:"libtheora0-32bit-1.0.beta2-3.1") ) flag++;
    if ( rpm_check(release:"SUSE11.0", cpu:"x86_64", reference:"libvisual-32bit-0.4.0-139.1") ) flag++;
    if ( rpm_check(release:"SUSE11.0", cpu:"x86_64", reference:"libvorbis-32bit-1.2.0-53.1") ) flag++;
    
    if (flag)
    {
      if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());
      else security_warning(0);
      exit(0);
    }
    else
    {
      tested = pkg_tests_get();
      if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
      else audit(AUDIT_PACKAGE_NOT_INSTALLED, "cdparanoia / cdparanoia-32bit / check / check-32bit / etc");
    }
    
  • NASL familyMandriva Local Security Checks
    NASL idMANDRIVA_MDVSA-2009-321.NASL
    descriptionSecurity vulnerabilities has been identified and fixed in pidgin : The NSS plugin in libpurple in Pidgin 2.4.1 does not verify SSL certificates, which makes it easier for remote attackers to trick a user into accepting an invalid server certificate for a spoofed service. (CVE-2008-3532) Pidgin 2.4.1 allows remote attackers to cause a denial of service (crash) via a long filename that contains certain characters, as demonstrated using an MSN message that triggers the crash in the msn_slplink_process_msg function. (CVE-2008-2955) The UPnP functionality in Pidgin 2.0.0, and possibly other versions, allows remote attackers to trigger the download of arbitrary files and cause a denial of service (memory or disk consumption) via a UDP packet that specifies an arbitrary URL. (CVE-2008-2957) Buffer overflow in the XMPP SOCKS5 bytestream server in Pidgin (formerly Gaim) before 2.5.6 allows remote authenticated users to execute arbitrary code via vectors involving an outbound XMPP file transfer. NOTE: some of these details are obtained from third-party information (CVE-2009-1373). Buffer overflow in the decrypt_out function in Pidgin (formerly Gaim) before 2.5.6 allows remote attackers to cause a denial of service (application crash) via a QQ packet (CVE-2009-1374). The PurpleCircBuffer implementation in Pidgin (formerly Gaim) before 2.5.6 does not properly maintain a certain buffer, which allows remote attackers to cause a denial of service (memory corruption and application crash) via vectors involving the (1) XMPP or (2) Sametime protocol (CVE-2009-1375). Multiple integer overflows in the msn_slplink_process_msg functions in the MSN protocol handler in (1) libpurple/protocols/msn/slplink.c and (2) libpurple/protocols/msnp9/slplink.c in Pidgin (formerly Gaim) before 2.5.6 on 32-bit platforms allow remote attackers to execute arbitrary code via a malformed SLP message with a crafted offset value, leading to buffer overflows. NOTE: this issue exists because of an incomplete fix for CVE-2008-2927 (CVE-2009-1376). The OSCAR protocol implementation in Pidgin before 2.5.8 misinterprets the ICQWebMessage message type as the ICQSMS message type, which allows remote attackers to cause a denial of service (application crash) via a crafted ICQ web message that triggers allocation of a large amount of memory (CVE-2009-1889). The msn_slplink_process_msg function in libpurple/protocols/msn/slplink.c in libpurple, as used in Pidgin (formerly Gaim) before 2.5.9 and Adium 1.3.5 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) by sending multiple crafted SLP (aka MSNSLP) messages to trigger an overwrite of an arbitrary memory location. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2009-1376 (CVE-2009-2694). Unspecified vulnerability in Pidgin 2.6.0 allows remote attackers to cause a denial of service (crash) via a link in a Yahoo IM (CVE-2009-3025) protocols/jabber/auth.c in libpurple in Pidgin 2.6.0, and possibly other versions, does not follow the require TLS/SSL preference when connecting to older Jabber servers that do not follow the XMPP specification, which causes libpurple to connect to the server without the expected encryption and allows remote attackers to sniff sessions (CVE-2009-3026). libpurple/protocols/irc/msgs.c in the IRC protocol plugin in libpurple in Pidgin before 2.6.2 allows remote IRC servers to cause a denial of service (NULL pointer dereference and application crash) via a TOPIC message that lacks a topic string (CVE-2009-2703). The msn_slp_sip_recv function in libpurple/protocols/msn/slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an SLP invite message that lacks certain required fields, as demonstrated by a malformed message from a KMess client (CVE-2009-3083). The msn_slp_process_msg function in libpurple/protocols/msn/slpcall.c in the MSN protocol plugin in libpurple 2.6.0 and 2.6.1, as used in Pidgin before 2.6.2, allows remote attackers to cause a denial of service (application crash) via a handwritten (aka Ink) message, related to an uninitialized variable and the incorrect UTF16-LE charset name (CVE-2009-3084). The XMPP protocol plugin in libpurple in Pidgin before 2.6.2 does not properly handle an error IQ stanza during an attempted fetch of a custom smiley, which allows remote attackers to cause a denial of service (application crash) via XHTML-IM content with cid: images (CVE-2009-3085). This update provides pidgin 2.6.2, which is not vulnerable to these issues.
    last seen2020-06-01
    modified2020-06-02
    plugin id43024
    published2009-12-07
    reporterThis script is Copyright (C) 2009-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/43024
    titleMandriva Linux Security Advisory : pidgin (MDVSA-2009:321)
    code
    #%NASL_MIN_LEVEL 80502
    
    #
    # (C) Tenable Network Security, Inc.
    #
    # The descriptive text and package checks in this plugin were  
    # extracted from Mandriva Linux Security Advisory MDVSA-2009:321. 
    # The text itself is copyright (C) Mandriva S.A.
    #
    
    if (NASL_LEVEL < 3000) exit(0);
    
    include("compat.inc");
    
    if (description)
    {
      script_id(43024);
      script_version("1.23");
      script_cvs_date("Date: 2019/10/16 10:34:21");
    
      script_cve_id("CVE-2008-2955", "CVE-2008-2957", "CVE-2008-3532", "CVE-2009-1373", "CVE-2009-1374", "CVE-2009-1375", "CVE-2009-1376", "CVE-2009-1889", "CVE-2009-2694", "CVE-2009-2703", "CVE-2009-3025", "CVE-2009-3026", "CVE-2009-3083", "CVE-2009-3084", "CVE-2009-3085");
      script_bugtraq_id(35067, 35530, 36071, 36277);
      script_xref(name:"MDVSA", value:"2009:321");
    
      script_name(english:"Mandriva Linux Security Advisory : pidgin (MDVSA-2009:321)");
      script_summary(english:"Checks rpm output for the updated packages");
    
      script_set_attribute(
        attribute:"synopsis", 
        value:
    "The remote Mandriva Linux host is missing one or more security
    updates."
      );
      script_set_attribute(
        attribute:"description", 
        value:
    "Security vulnerabilities has been identified and fixed in pidgin :
    
    The NSS plugin in libpurple in Pidgin 2.4.1 does not verify SSL
    certificates, which makes it easier for remote attackers to trick a
    user into accepting an invalid server certificate for a spoofed
    service. (CVE-2008-3532)
    
    Pidgin 2.4.1 allows remote attackers to cause a denial of service
    (crash) via a long filename that contains certain characters, as
    demonstrated using an MSN message that triggers the crash in the
    msn_slplink_process_msg function. (CVE-2008-2955)
    
    The UPnP functionality in Pidgin 2.0.0, and possibly other versions,
    allows remote attackers to trigger the download of arbitrary files and
    cause a denial of service (memory or disk consumption) via a UDP
    packet that specifies an arbitrary URL. (CVE-2008-2957)
    
    Buffer overflow in the XMPP SOCKS5 bytestream server in Pidgin
    (formerly Gaim) before 2.5.6 allows remote authenticated users to
    execute arbitrary code via vectors involving an outbound XMPP file
    transfer. NOTE: some of these details are obtained from third-party
    information (CVE-2009-1373).
    
    Buffer overflow in the decrypt_out function in Pidgin (formerly Gaim)
    before 2.5.6 allows remote attackers to cause a denial of service
    (application crash) via a QQ packet (CVE-2009-1374).
    
    The PurpleCircBuffer implementation in Pidgin (formerly Gaim) before
    2.5.6 does not properly maintain a certain buffer, which allows remote
    attackers to cause a denial of service (memory corruption and
    application crash) via vectors involving the (1) XMPP or (2) Sametime
    protocol (CVE-2009-1375).
    
    Multiple integer overflows in the msn_slplink_process_msg functions in
    the MSN protocol handler in (1) libpurple/protocols/msn/slplink.c and
    (2) libpurple/protocols/msnp9/slplink.c in Pidgin (formerly Gaim)
    before 2.5.6 on 32-bit platforms allow remote attackers to execute
    arbitrary code via a malformed SLP message with a crafted offset
    value, leading to buffer overflows. NOTE: this issue exists because of
    an incomplete fix for CVE-2008-2927 (CVE-2009-1376).
    
    The OSCAR protocol implementation in Pidgin before 2.5.8 misinterprets
    the ICQWebMessage message type as the ICQSMS message type, which
    allows remote attackers to cause a denial of service (application
    crash) via a crafted ICQ web message that triggers allocation of a
    large amount of memory (CVE-2009-1889).
    
    The msn_slplink_process_msg function in
    libpurple/protocols/msn/slplink.c in libpurple, as used in Pidgin
    (formerly Gaim) before 2.5.9 and Adium 1.3.5 and earlier, allows
    remote attackers to execute arbitrary code or cause a denial of
    service (memory corruption and application crash) by sending multiple
    crafted SLP (aka MSNSLP) messages to trigger an overwrite of an
    arbitrary memory location. NOTE: this issue reportedly exists because
    of an incomplete fix for CVE-2009-1376 (CVE-2009-2694).
    
    Unspecified vulnerability in Pidgin 2.6.0 allows remote attackers to
    cause a denial of service (crash) via a link in a Yahoo IM
    (CVE-2009-3025)
    
    protocols/jabber/auth.c in libpurple in Pidgin 2.6.0, and possibly
    other versions, does not follow the require TLS/SSL preference when
    connecting to older Jabber servers that do not follow the XMPP
    specification, which causes libpurple to connect to the server without
    the expected encryption and allows remote attackers to sniff sessions
    (CVE-2009-3026).
    
    libpurple/protocols/irc/msgs.c in the IRC protocol plugin in libpurple
    in Pidgin before 2.6.2 allows remote IRC servers to cause a denial of
    service (NULL pointer dereference and application crash) via a TOPIC
    message that lacks a topic string (CVE-2009-2703).
    
    The msn_slp_sip_recv function in libpurple/protocols/msn/slp.c in the
    MSN protocol plugin in libpurple in Pidgin before 2.6.2 allows remote
    attackers to cause a denial of service (NULL pointer dereference and
    application crash) via an SLP invite message that lacks certain
    required fields, as demonstrated by a malformed message from a KMess
    client (CVE-2009-3083).
    
    The msn_slp_process_msg function in libpurple/protocols/msn/slpcall.c
    in the MSN protocol plugin in libpurple 2.6.0 and 2.6.1, as used in
    Pidgin before 2.6.2, allows remote attackers to cause a denial of
    service (application crash) via a handwritten (aka Ink) message,
    related to an uninitialized variable and the incorrect UTF16-LE
    charset name (CVE-2009-3084).
    
    The XMPP protocol plugin in libpurple in Pidgin before 2.6.2 does not
    properly handle an error IQ stanza during an attempted fetch of a
    custom smiley, which allows remote attackers to cause a denial of
    service (application crash) via XHTML-IM content with cid: images
    (CVE-2009-3085).
    
    This update provides pidgin 2.6.2, which is not vulnerable to these
    issues."
      );
      script_set_attribute(
        attribute:"see_also",
        value:"http://pidgin.im/news/security/"
      );
      script_set_attribute(attribute:"solution", value:"Update the affected packages.");
      script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C");
      script_set_cvss_temporal_vector("CVSS2#E:H/RL:OF/RC:C");
      script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
      script_set_attribute(attribute:"exploit_available", value:"true");
      script_set_attribute(attribute:"exploit_framework_core", value:"true");
      script_set_attribute(attribute:"exploited_by_malware", value:"true");
      script_cwe_id(20, 119, 189, 310, 399);
    
      script_set_attribute(attribute:"plugin_type", value:"local");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:finch");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:lib64finch0");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:lib64purple-devel");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:lib64purple0");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libfinch0");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libpurple-devel");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libpurple0");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:pidgin");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:pidgin-bonjour");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:pidgin-client");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:pidgin-gevolution");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:pidgin-i18n");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:pidgin-meanwhile");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:pidgin-mono");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:pidgin-perl");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:pidgin-plugins");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:pidgin-silc");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:pidgin-tcl");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:mandriva:linux:2008.0");
    
      script_set_attribute(attribute:"patch_publication_date", value:"2009/12/06");
      script_set_attribute(attribute:"plugin_publication_date", value:"2009/12/07");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_copyright(english:"This script is Copyright (C) 2009-2019 and is owned by Tenable, Inc. or an Affiliate thereof.");
      script_family(english:"Mandriva Local Security Checks");
    
      script_dependencies("ssh_get_info.nasl");
      script_require_keys("Host/local_checks_enabled", "Host/cpu", "Host/Mandrake/release", "Host/Mandrake/rpm-list");
    
      exit(0);
    }
    
    
    include("audit.inc");
    include("global_settings.inc");
    include("rpm.inc");
    
    
    if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
    if (!get_kb_item("Host/Mandrake/release")) audit(AUDIT_OS_NOT, "Mandriva / Mandake Linux");
    if (!get_kb_item("Host/Mandrake/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
    
    cpu = get_kb_item("Host/cpu");
    if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
    if (cpu !~ "^(amd64|i[3-6]86|x86_64)$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Mandriva / Mandrake Linux", cpu);
    
    
    flag = 0;
    if (rpm_check(release:"MDK2008.0", reference:"finch-2.6.2-0.1mdv2008.0", yank:"mdv")) flag++;
    if (rpm_check(release:"MDK2008.0", cpu:"x86_64", reference:"lib64finch0-2.6.2-0.1mdv2008.0", yank:"mdv")) flag++;
    if (rpm_check(release:"MDK2008.0", cpu:"x86_64", reference:"lib64purple-devel-2.6.2-0.1mdv2008.0", yank:"mdv")) flag++;
    if (rpm_check(release:"MDK2008.0", cpu:"x86_64", reference:"lib64purple0-2.6.2-0.1mdv2008.0", yank:"mdv")) flag++;
    if (rpm_check(release:"MDK2008.0", cpu:"i386", reference:"libfinch0-2.6.2-0.1mdv2008.0", yank:"mdv")) flag++;
    if (rpm_check(release:"MDK2008.0", cpu:"i386", reference:"libpurple-devel-2.6.2-0.1mdv2008.0", yank:"mdv")) flag++;
    if (rpm_check(release:"MDK2008.0", cpu:"i386", reference:"libpurple0-2.6.2-0.1mdv2008.0", yank:"mdv")) flag++;
    if (rpm_check(release:"MDK2008.0", reference:"pidgin-2.6.2-0.1mdv2008.0", yank:"mdv")) flag++;
    if (rpm_check(release:"MDK2008.0", reference:"pidgin-bonjour-2.6.2-0.1mdv2008.0", yank:"mdv")) flag++;
    if (rpm_check(release:"MDK2008.0", reference:"pidgin-client-2.6.2-0.1mdv2008.0", yank:"mdv")) flag++;
    if (rpm_check(release:"MDK2008.0", reference:"pidgin-gevolution-2.6.2-0.1mdv2008.0", yank:"mdv")) flag++;
    if (rpm_check(release:"MDK2008.0", reference:"pidgin-i18n-2.6.2-0.1mdv2008.0", yank:"mdv")) flag++;
    if (rpm_check(release:"MDK2008.0", reference:"pidgin-meanwhile-2.6.2-0.1mdv2008.0", yank:"mdv")) flag++;
    if (rpm_check(release:"MDK2008.0", reference:"pidgin-mono-2.6.2-0.1mdv2008.0", yank:"mdv")) flag++;
    if (rpm_check(release:"MDK2008.0", reference:"pidgin-perl-2.6.2-0.1mdv2008.0", yank:"mdv")) flag++;
    if (rpm_check(release:"MDK2008.0", reference:"pidgin-plugins-2.6.2-0.1mdv2008.0", yank:"mdv")) flag++;
    if (rpm_check(release:"MDK2008.0", reference:"pidgin-silc-2.6.2-0.1mdv2008.0", yank:"mdv")) flag++;
    if (rpm_check(release:"MDK2008.0", reference:"pidgin-tcl-2.6.2-0.1mdv2008.0", yank:"mdv")) flag++;
    
    
    if (flag)
    {
      if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());
      else security_hole(0);
      exit(0);
    }
    else audit(AUDIT_HOST_NOT, "affected");
    
  • NASL familySuSE Local Security Checks
    NASL idSUSE_11_1_FINCH-081203.NASL
    descriptionThis update of pidgin fixes the following issues : - CVE-2009-3026: CVSS v2 Base Score: 5.0 Allowed to send confidential data unencrypted even if SSL was chosen by user. - CVE-2009-3025: CVSS v2 Base Score: 4.3 Remote denial of service in yahoo IM plug-in. - CVE-2009-3083: CVSS v2 Base Score: 5.0 Remote denial of service in MSN plug-in. - CVE-2009-3084: CVSS v2 Base Score: 5.0 Remote denial of service in MSN plug-in. - CVE-2009-3085: CVSS v2 Base Score: 5.0 Remote denial of service in XMPP plug-in. - CVE-2009-3615: CVSS v2 Base Score: 5.0 Remote denial of service in ICQ plug-in. - QQ protocol upgrade Migrate all QQ accounts to QQ2008.
    last seen2020-06-01
    modified2020-06-02
    plugin id43052
    published2009-12-08
    reporterThis script is Copyright (C) 2009-2019 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/43052
    titleopenSUSE Security Update : finch (finch-1625)
    code
    #%NASL_MIN_LEVEL 80502
    #
    # (C) Tenable Network Security, Inc.
    #
    # The descriptive text and package checks in this plugin were
    # extracted from openSUSE Security Update finch-1625.
    #
    # The text description of this plugin is (C) SUSE LLC.
    #
    
    include("compat.inc");
    
    if (description)
    {
      script_id(43052);
      script_version("1.9");
      script_cvs_date("Date: 2019/10/25 13:36:31");
    
      script_cve_id("CVE-2009-3025", "CVE-2009-3026", "CVE-2009-3083", "CVE-2009-3084", "CVE-2009-3085", "CVE-2009-3615");
    
      script_name(english:"openSUSE Security Update : finch (finch-1625)");
      script_summary(english:"Check for the finch-1625 patch");
    
      script_set_attribute(
        attribute:"synopsis", 
        value:"The remote openSUSE host is missing a security update."
      );
      script_set_attribute(
        attribute:"description", 
        value:
    "This update of pidgin fixes the following issues :
    
      - CVE-2009-3026: CVSS v2 Base Score: 5.0 Allowed to send
        confidential data unencrypted even if SSL was chosen by
        user.
    
      - CVE-2009-3025: CVSS v2 Base Score: 4.3 Remote denial of
        service in yahoo IM plug-in.
    
      - CVE-2009-3083: CVSS v2 Base Score: 5.0 Remote denial of
        service in MSN plug-in.
    
      - CVE-2009-3084: CVSS v2 Base Score: 5.0 Remote denial of
        service in MSN plug-in.
    
      - CVE-2009-3085: CVSS v2 Base Score: 5.0 Remote denial of
        service in XMPP plug-in.
    
      - CVE-2009-3615: CVSS v2 Base Score: 5.0 Remote denial of
        service in ICQ plug-in.
    
      - QQ protocol upgrade Migrate all QQ accounts to QQ2008."
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://bugzilla.novell.com/show_bug.cgi?id=535570"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://bugzilla.novell.com/show_bug.cgi?id=535832"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://bugzilla.novell.com/show_bug.cgi?id=536602"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://bugzilla.novell.com/show_bug.cgi?id=548072"
      );
      script_set_attribute(
        attribute:"solution", 
        value:"Update the affected finch packages."
      );
      script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N");
      script_cwe_id(20, 119, 310, 399);
    
      script_set_attribute(attribute:"plugin_type", value:"local");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:cdparanoia");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:cdparanoia-32bit");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:check");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:check-32bit");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:desktop-file-utils");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:fam");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:fam-32bit");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:finch");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:finch-devel");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:gnome-vfs2");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:gnome-vfs2-32bit");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:gnome-vfs2-lang");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:gstreamer-0_10");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:gstreamer-0_10-32bit");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:gstreamer-0_10-lang");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libgstreamer-0_10-0");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libgstreamer-0_10-0-32bit");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libogg0");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libogg0-32bit");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:liboil");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:liboil-32bit");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libpurple");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libpurple-devel");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libpurple-lang");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libpurple-meanwhile");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libpurple-mono");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libtheora0");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libtheora0-32bit");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libvisual");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libvisual-32bit");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libvorbis");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:libvorbis-32bit");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:pidgin");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:pidgin-devel");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:pidgin-otr");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:novell:opensuse:11.1");
    
      script_set_attribute(attribute:"patch_publication_date", value:"2008/12/03");
      script_set_attribute(attribute:"plugin_publication_date", value:"2009/12/08");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_copyright(english:"This script is Copyright (C) 2009-2019 Tenable Network Security, Inc.");
      script_family(english:"SuSE Local Security Checks");
    
      script_dependencies("ssh_get_info.nasl");
      script_require_keys("Host/local_checks_enabled", "Host/SuSE/release", "Host/SuSE/rpm-list", "Host/cpu");
    
      exit(0);
    }
    
    
    include("audit.inc");
    include("global_settings.inc");
    include("rpm.inc");
    
    if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
    release = get_kb_item("Host/SuSE/release");
    if (isnull(release) || release =~ "^(SLED|SLES)") audit(AUDIT_OS_NOT, "openSUSE");
    if (release !~ "^(SUSE11\.1)$") audit(AUDIT_OS_RELEASE_NOT, "openSUSE", "11.1", release);
    if (!get_kb_item("Host/SuSE/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
    
    ourarch = get_kb_item("Host/cpu");
    if (!ourarch) audit(AUDIT_UNKNOWN_ARCH);
    if (ourarch !~ "^(i586|i686|x86_64)$") audit(AUDIT_ARCH_NOT, "i586 / i686 / x86_64", ourarch);
    
    flag = 0;
    
    if ( rpm_check(release:"SUSE11.1", reference:"cdparanoia-IIIalpha9.8-690.12") ) flag++;
    if ( rpm_check(release:"SUSE11.1", reference:"check-0.9.5-63.47") ) flag++;
    if ( rpm_check(release:"SUSE11.1", reference:"desktop-file-utils-0.15-1.119") ) flag++;
    if ( rpm_check(release:"SUSE11.1", reference:"fam-2.7.0-129.11") ) flag++;
    if ( rpm_check(release:"SUSE11.1", reference:"finch-2.6.3-0.1.1") ) flag++;
    if ( rpm_check(release:"SUSE11.1", reference:"finch-devel-2.6.3-0.1.1") ) flag++;
    if ( rpm_check(release:"SUSE11.1", reference:"gnome-vfs2-2.24.0-3.6") ) flag++;
    if ( rpm_check(release:"SUSE11.1", reference:"gnome-vfs2-lang-2.24.0-3.6") ) flag++;
    if ( rpm_check(release:"SUSE11.1", reference:"gstreamer-0_10-0.10.21-3.11") ) flag++;
    if ( rpm_check(release:"SUSE11.1", reference:"gstreamer-0_10-lang-0.10.21-3.11") ) flag++;
    if ( rpm_check(release:"SUSE11.1", reference:"libgstreamer-0_10-0-0.10.21-3.11") ) flag++;
    if ( rpm_check(release:"SUSE11.1", reference:"libogg0-1.1.3-86.33") ) flag++;
    if ( rpm_check(release:"SUSE11.1", reference:"liboil-0.3.15-1.28") ) flag++;
    if ( rpm_check(release:"SUSE11.1", reference:"libpurple-2.6.3-0.1.1") ) flag++;
    if ( rpm_check(release:"SUSE11.1", reference:"libpurple-devel-2.6.3-0.1.1") ) flag++;
    if ( rpm_check(release:"SUSE11.1", reference:"libpurple-lang-2.6.3-0.1.1") ) flag++;
    if ( rpm_check(release:"SUSE11.1", reference:"libpurple-meanwhile-2.6.3-0.1.1") ) flag++;
    if ( rpm_check(release:"SUSE11.1", reference:"libpurple-mono-2.6.3-0.1.1") ) flag++;
    if ( rpm_check(release:"SUSE11.1", reference:"libtheora0-1.0.beta2-3.94") ) flag++;
    if ( rpm_check(release:"SUSE11.1", reference:"libvisual-0.4.0-174.16") ) flag++;
    if ( rpm_check(release:"SUSE11.1", reference:"libvorbis-1.2.0-78.13") ) flag++;
    if ( rpm_check(release:"SUSE11.1", reference:"pidgin-2.6.3-0.1.1") ) flag++;
    if ( rpm_check(release:"SUSE11.1", reference:"pidgin-devel-2.6.3-0.1.1") ) flag++;
    if ( rpm_check(release:"SUSE11.1", reference:"pidgin-otr-3.2.0-1.16.1") ) flag++;
    if ( rpm_check(release:"SUSE11.1", cpu:"x86_64", reference:"cdparanoia-32bit-IIIalpha9.8-690.12") ) flag++;
    if ( rpm_check(release:"SUSE11.1", cpu:"x86_64", reference:"cdparanoia-IIIalpha9.8-690.17") ) flag++;
    if ( rpm_check(release:"SUSE11.1", cpu:"x86_64", reference:"check-0.9.5-63.51") ) flag++;
    if ( rpm_check(release:"SUSE11.1", cpu:"x86_64", reference:"check-32bit-0.9.5-63.47") ) flag++;
    if ( rpm_check(release:"SUSE11.1", cpu:"x86_64", reference:"desktop-file-utils-0.15-1.113") ) flag++;
    if ( rpm_check(release:"SUSE11.1", cpu:"x86_64", reference:"fam-2.7.0-129.19") ) flag++;
    if ( rpm_check(release:"SUSE11.1", cpu:"x86_64", reference:"fam-32bit-2.7.0-129.11") ) flag++;
    if ( rpm_check(release:"SUSE11.1", cpu:"x86_64", reference:"gnome-vfs2-2.24.0-3.5") ) flag++;
    if ( rpm_check(release:"SUSE11.1", cpu:"x86_64", reference:"gnome-vfs2-32bit-2.24.0-3.6") ) flag++;
    if ( rpm_check(release:"SUSE11.1", cpu:"x86_64", reference:"gnome-vfs2-lang-2.24.0-3.5") ) flag++;
    if ( rpm_check(release:"SUSE11.1", cpu:"x86_64", reference:"gstreamer-0_10-0.10.21-3.13") ) flag++;
    if ( rpm_check(release:"SUSE11.1", cpu:"x86_64", reference:"gstreamer-0_10-32bit-0.10.21-3.11") ) flag++;
    if ( rpm_check(release:"SUSE11.1", cpu:"x86_64", reference:"gstreamer-0_10-lang-0.10.21-3.13") ) flag++;
    if ( rpm_check(release:"SUSE11.1", cpu:"x86_64", reference:"libgstreamer-0_10-0-0.10.21-3.13") ) flag++;
    if ( rpm_check(release:"SUSE11.1", cpu:"x86_64", reference:"libgstreamer-0_10-0-32bit-0.10.21-3.11") ) flag++;
    if ( rpm_check(release:"SUSE11.1", cpu:"x86_64", reference:"libogg0-1.1.3-86.37") ) flag++;
    if ( rpm_check(release:"SUSE11.1", cpu:"x86_64", reference:"libogg0-32bit-1.1.3-86.33") ) flag++;
    if ( rpm_check(release:"SUSE11.1", cpu:"x86_64", reference:"liboil-0.3.15-1.35") ) flag++;
    if ( rpm_check(release:"SUSE11.1", cpu:"x86_64", reference:"liboil-32bit-0.3.15-1.28") ) flag++;
    if ( rpm_check(release:"SUSE11.1", cpu:"x86_64", reference:"libtheora0-1.0.beta2-3.96") ) flag++;
    if ( rpm_check(release:"SUSE11.1", cpu:"x86_64", reference:"libtheora0-32bit-1.0.beta2-3.94") ) flag++;
    if ( rpm_check(release:"SUSE11.1", cpu:"x86_64", reference:"libvisual-0.4.0-174.18") ) flag++;
    if ( rpm_check(release:"SUSE11.1", cpu:"x86_64", reference:"libvisual-32bit-0.4.0-174.16") ) flag++;
    if ( rpm_check(release:"SUSE11.1", cpu:"x86_64", reference:"libvorbis-1.2.0-78.16") ) flag++;
    if ( rpm_check(release:"SUSE11.1", cpu:"x86_64", reference:"libvorbis-32bit-1.2.0-78.13") ) flag++;
    
    if (flag)
    {
      if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());
      else security_warning(0);
      exit(0);
    }
    else
    {
      tested = pkg_tests_get();
      if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
      else audit(AUDIT_PACKAGE_NOT_INSTALLED, "cdparanoia / cdparanoia-32bit / check / check-32bit / etc");
    }
    
  • NASL familySuSE Local Security Checks
    NASL idSUSE_FINCH-6710.NASL
    descriptionThis update of pidgin fixes the following issues : - Allowed to send confidential data unencrypted even if SSL was chosen by user. (CVE-2009-3026: CVSS v2 Base Score: 5.0) - Remote denial of service in yahoo IM plug-in. (CVE-2009-3025: CVSS v2 Base Score: 4.3) - Remote denial of service in MSN plug-in. (CVE-2009-3083: CVSS v2 Base Score: 5.0) - Remote denial of service in MSN plug-in. (CVE-2009-3084: CVSS v2 Base Score: 5.0) - Remote denial of service in XMPP plug-in. (CVE-2009-3085: CVSS v2 Base Score: 5.0) - Remote denial of service in ICQ plug-in. (CVE-2009-3615: CVSS v2 Base Score: 5.0) - QQ protocol upgrade Migrate all QQ accounts to QQ2008.
    last seen2020-06-01
    modified2020-06-02
    plugin id51726
    published2011-01-27
    reporterThis script is Copyright (C) 2011-2019 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/51726
    titleSuSE 10 Security Update : pidgin (ZYPP Patch Number 6710)
    code
    #%NASL_MIN_LEVEL 80502
    #
    # (C) Tenable Network Security, Inc.
    #
    # The text description of this plugin is (C) Novell, Inc.
    #
    
    include("compat.inc");
    
    if (description)
    {
      script_id(51726);
      script_version ("1.6");
      script_cvs_date("Date: 2019/10/25 13:36:36");
    
      script_cve_id("CVE-2009-3025", "CVE-2009-3026", "CVE-2009-3083", "CVE-2009-3084", "CVE-2009-3085", "CVE-2009-3615");
    
      script_name(english:"SuSE 10 Security Update : pidgin (ZYPP Patch Number 6710)");
      script_summary(english:"Checks rpm output for the updated packages");
    
      script_set_attribute(
        attribute:"synopsis", 
        value:"The remote SuSE 10 host is missing a security-related patch."
      );
      script_set_attribute(
        attribute:"description", 
        value:
    "This update of pidgin fixes the following issues :
    
      - Allowed to send confidential data unencrypted even if
        SSL was chosen by user. (CVE-2009-3026: CVSS v2 Base
        Score: 5.0)
    
      - Remote denial of service in yahoo IM plug-in.
        (CVE-2009-3025: CVSS v2 Base Score: 4.3)
    
      - Remote denial of service in MSN plug-in. (CVE-2009-3083:
        CVSS v2 Base Score: 5.0)
    
      - Remote denial of service in MSN plug-in. (CVE-2009-3084:
        CVSS v2 Base Score: 5.0)
    
      - Remote denial of service in XMPP plug-in.
        (CVE-2009-3085: CVSS v2 Base Score: 5.0)
    
      - Remote denial of service in ICQ plug-in. (CVE-2009-3615:
        CVSS v2 Base Score: 5.0)
    
      - QQ protocol upgrade Migrate all QQ accounts to QQ2008."
      );
      script_set_attribute(
        attribute:"see_also",
        value:"http://support.novell.com/security/cve/CVE-2009-3025.html"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"http://support.novell.com/security/cve/CVE-2009-3026.html"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"http://support.novell.com/security/cve/CVE-2009-3083.html"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"http://support.novell.com/security/cve/CVE-2009-3084.html"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"http://support.novell.com/security/cve/CVE-2009-3085.html"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"http://support.novell.com/security/cve/CVE-2009-3615.html"
      );
      script_set_attribute(attribute:"solution", value:"Apply ZYPP patch number 6710.");
      script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N");
      script_cwe_id(20, 119, 310, 399);
    
      script_set_attribute(attribute:"plugin_type", value:"local");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:suse:suse_linux");
    
      script_set_attribute(attribute:"patch_publication_date", value:"2009/12/07");
      script_set_attribute(attribute:"plugin_publication_date", value:"2011/01/27");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_copyright(english:"This script is Copyright (C) 2011-2019 Tenable Network Security, Inc.");
      script_family(english:"SuSE Local Security Checks");
    
      script_dependencies("ssh_get_info.nasl");
      script_require_keys("Host/local_checks_enabled", "Host/cpu", "Host/SuSE/release", "Host/SuSE/rpm-list");
    
      exit(0);
    }
    
    
    include("global_settings.inc");
    include("rpm.inc");
    
    
    if (!get_kb_item("Host/local_checks_enabled")) exit(0, "Local checks are not enabled.");
    if (!get_kb_item("Host/SuSE/release")) exit(0, "The host is not running SuSE.");
    if (!get_kb_item("Host/SuSE/rpm-list")) exit(1, "Could not obtain the list of installed packages.");
    
    cpu = get_kb_item("Host/cpu");
    if (isnull(cpu)) exit(1, "Failed to determine the architecture type.");
    if (cpu >!< "x86_64" && cpu !~ "^i[3-6]86$") exit(1, "Local checks for SuSE 10 on the '"+cpu+"' architecture have not been implemented.");
    
    
    flag = 0;
    if (rpm_check(release:"SLED10", sp:3, reference:"finch-2.6.3-0.5.1")) flag++;
    if (rpm_check(release:"SLED10", sp:3, reference:"libpurple-2.6.3-0.5.1")) flag++;
    if (rpm_check(release:"SLED10", sp:3, reference:"pidgin-2.6.3-0.5.1")) flag++;
    
    
    if (flag)
    {
      if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());
      else security_warning(0);
      exit(0);
    }
    else exit(0, "The host is not affected.");
    
  • NASL familyScientific Linux Local Security Checks
    NASL idSL_20090921_PIDGIN_ON_SL4_X.NASL
    descriptionCVE-2009-3026 pidgin: ignores SSL/TLS requirements with old jabber servers CVE-2009-2703 Pidgin: NULL pointer dereference by handling IRC topic(s) (DoS) CVE-2009-3083 Pidgin: NULL pointer dereference by processing incomplete MSN SLP invite (DoS) CVE-2009-3085 Pidgin: NULL pointer dereference by processing a custom smiley (DoS) A NULL pointer dereference flaw was found in the way the Pidgin XMPP protocol plug-in processes IQ error responses when trying to fetch a custom smiley. A remote client could send a specially crafted IQ error response that would crash Pidgin. (CVE-2009-3085) A NULL pointer dereference flaw was found in the way the Pidgin IRC protocol plug-in handles IRC topics. A malicious IRC server could send a specially crafted IRC TOPIC message, which once received by Pidgin, would lead to a denial of service (Pidgin crash). (CVE-2009-2703) It was discovered that, when connecting to certain, very old Jabber servers via XMPP, Pidgin may ignore the
    last seen2020-06-01
    modified2020-06-02
    plugin id60668
    published2012-08-01
    reporterThis script is Copyright (C) 2012-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/60668
    titleScientific Linux Security Update : pidgin on SL4.x, SL5.x i386/x86_64
    code
    #%NASL_MIN_LEVEL 80502
    #
    # (C) Tenable Network Security, Inc.
    #
    # The descriptive text is (C) Scientific Linux.
    #
    
    include("compat.inc");
    
    if (description)
    {
      script_id(60668);
      script_version("1.6");
      script_cvs_date("Date: 2019/10/25 13:36:18");
    
      script_cve_id("CVE-2009-2703", "CVE-2009-3026", "CVE-2009-3083", "CVE-2009-3085");
    
      script_name(english:"Scientific Linux Security Update : pidgin on SL4.x, SL5.x i386/x86_64");
      script_summary(english:"Checks rpm output for the updated packages");
    
      script_set_attribute(
        attribute:"synopsis", 
        value:
    "The remote Scientific Linux host is missing one or more security
    updates."
      );
      script_set_attribute(
        attribute:"description", 
        value:
    "CVE-2009-3026 pidgin: ignores SSL/TLS requirements with old jabber
    servers
    
    CVE-2009-2703 Pidgin: NULL pointer dereference by handling IRC
    topic(s) (DoS)
    
    CVE-2009-3083 Pidgin: NULL pointer dereference by processing
    incomplete MSN SLP invite (DoS)
    
    CVE-2009-3085 Pidgin: NULL pointer dereference by processing a custom
    smiley (DoS)
    
    A NULL pointer dereference flaw was found in the way the Pidgin XMPP
    protocol plug-in processes IQ error responses when trying to fetch a
    custom smiley. A remote client could send a specially crafted IQ error
    response that would crash Pidgin. (CVE-2009-3085)
    
    A NULL pointer dereference flaw was found in the way the Pidgin IRC
    protocol plug-in handles IRC topics. A malicious IRC server could send
    a specially crafted IRC TOPIC message, which once received by Pidgin,
    would lead to a denial of service (Pidgin crash). (CVE-2009-2703)
    
    It was discovered that, when connecting to certain, very old Jabber
    servers via XMPP, Pidgin may ignore the 'Require SSL/TLS' setting. In
    these situations, a non-encrypted connection is established rather
    than the connection failing, causing the user to believe they are
    using an encrypted connection when they are not, leading to sensitive
    information disclosure (session sniffing). (CVE-2009-3026)
    
    A NULL pointer dereference flaw was found in the way the Pidgin MSN
    protocol plug-in handles improper MSNSLP invitations. A remote
    attacker could send a specially crafted MSNSLP invitation request,
    which once accepted by a valid Pidgin user, would lead to a denial of
    service (Pidgin crash). (CVE-2009-3083)
    
    Pidgin must be restarted for this update to take effect."
      );
      # https://listserv.fnal.gov/scripts/wa.exe?A2=ind0909&L=scientific-linux-errata&T=0&P=2055
      script_set_attribute(
        attribute:"see_also",
        value:"http://www.nessus.org/u?4e74ec1e"
      );
      script_set_attribute(attribute:"solution", value:"Update the affected packages.");
      script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P");
      script_cwe_id(119, 310);
    
      script_set_attribute(attribute:"plugin_type", value:"local");
      script_set_attribute(attribute:"cpe", value:"x-cpe:/o:fermilab:scientific_linux");
    
      script_set_attribute(attribute:"patch_publication_date", value:"2009/09/21");
      script_set_attribute(attribute:"plugin_publication_date", value:"2012/08/01");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_copyright(english:"This script is Copyright (C) 2012-2019 and is owned by Tenable, Inc. or an Affiliate thereof.");
      script_family(english:"Scientific Linux Local Security Checks");
    
      script_dependencies("ssh_get_info.nasl");
      script_require_keys("Host/local_checks_enabled", "Host/cpu", "Host/RedHat/release", "Host/RedHat/rpm-list");
    
      exit(0);
    }
    
    
    include("audit.inc");
    include("global_settings.inc");
    include("rpm.inc");
    
    
    if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
    release = get_kb_item("Host/RedHat/release");
    if (isnull(release) || "Scientific Linux " >!< release) audit(AUDIT_HOST_NOT, "running Scientific Linux");
    if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
    
    cpu = get_kb_item("Host/cpu");
    if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
    if (cpu >!< "x86_64" && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Scientific Linux", cpu);
    
    
    flag = 0;
    if (rpm_check(release:"SL4", reference:"finch-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"SL4", reference:"finch-devel-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"SL4", reference:"libpurple-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"SL4", reference:"libpurple-devel-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"SL4", reference:"libpurple-perl-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"SL4", reference:"libpurple-tcl-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"SL4", reference:"pidgin-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"SL4", reference:"pidgin-devel-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"SL4", reference:"pidgin-perl-2.6.2-2.el4")) flag++;
    
    if (rpm_check(release:"SL5", reference:"finch-2.6.2-2.el5")) flag++;
    if (rpm_check(release:"SL5", reference:"finch-devel-2.6.2-2.el5")) flag++;
    if (rpm_check(release:"SL5", reference:"libpurple-2.6.2-2.el5")) flag++;
    if (rpm_check(release:"SL5", reference:"libpurple-devel-2.6.2-2.el5")) flag++;
    if (rpm_check(release:"SL5", reference:"libpurple-perl-2.6.2-2.el5")) flag++;
    if (rpm_check(release:"SL5", reference:"libpurple-tcl-2.6.2-2.el5")) flag++;
    if (rpm_check(release:"SL5", reference:"pidgin-2.6.2-2.el5")) flag++;
    if (rpm_check(release:"SL5", reference:"pidgin-devel-2.6.2-2.el5")) flag++;
    if (rpm_check(release:"SL5", reference:"pidgin-perl-2.6.2-2.el5")) flag++;
    
    
    if (flag)
    {
      if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());
      else security_warning(0);
      exit(0);
    }
    else audit(AUDIT_HOST_NOT, "affected");
    
  • NASL familyCentOS Local Security Checks
    NASL idCENTOS_RHSA-2009-1453.NASL
    descriptionUpdated pidgin packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. Info/Query (IQ) is an Extensible Messaging and Presence Protocol (XMPP) specific request-response mechanism. A NULL pointer dereference flaw was found in the way the Pidgin XMPP protocol plug-in processes IQ error responses when trying to fetch a custom smiley. A remote client could send a specially crafted IQ error response that would crash Pidgin. (CVE-2009-3085) A NULL pointer dereference flaw was found in the way the Pidgin IRC protocol plug-in handles IRC topics. A malicious IRC server could send a specially crafted IRC TOPIC message, which once received by Pidgin, would lead to a denial of service (Pidgin crash). (CVE-2009-2703) It was discovered that, when connecting to certain, very old Jabber servers via XMPP, Pidgin may ignore the
    last seen2020-06-01
    modified2020-06-02
    plugin id43793
    published2010-01-06
    reporterThis script is Copyright (C) 2010-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/43793
    titleCentOS 4 / 5 : pidgin (CESA-2009:1453)
    code
    #%NASL_MIN_LEVEL 80502
    #
    # (C) Tenable Network Security, Inc.
    #
    # The descriptive text and package checks in this plugin were  
    # extracted from Red Hat Security Advisory RHSA-2009:1453 and 
    # CentOS Errata and Security Advisory 2009:1453 respectively.
    #
    
    include("compat.inc");
    
    if (description)
    {
      script_id(43793);
      script_version("1.15");
      script_cvs_date("Date: 2019/10/25 13:36:05");
    
      script_cve_id("CVE-2009-2703", "CVE-2009-3026", "CVE-2009-3083", "CVE-2009-3085");
      script_bugtraq_id(36277);
      script_xref(name:"RHSA", value:"2009:1453");
    
      script_name(english:"CentOS 4 / 5 : pidgin (CESA-2009:1453)");
      script_summary(english:"Checks rpm output for the updated packages");
    
      script_set_attribute(
        attribute:"synopsis", 
        value:"The remote CentOS host is missing one or more security updates."
      );
      script_set_attribute(
        attribute:"description", 
        value:
    "Updated pidgin packages that fix several security issues are now
    available for Red Hat Enterprise Linux 4 and 5.
    
    This update has been rated as having moderate security impact by the
    Red Hat Security Response Team.
    
    Pidgin is an instant messaging program which can log in to multiple
    accounts on multiple instant messaging networks simultaneously.
    Info/Query (IQ) is an Extensible Messaging and Presence Protocol
    (XMPP) specific request-response mechanism.
    
    A NULL pointer dereference flaw was found in the way the Pidgin XMPP
    protocol plug-in processes IQ error responses when trying to fetch a
    custom smiley. A remote client could send a specially crafted IQ error
    response that would crash Pidgin. (CVE-2009-3085)
    
    A NULL pointer dereference flaw was found in the way the Pidgin IRC
    protocol plug-in handles IRC topics. A malicious IRC server could send
    a specially crafted IRC TOPIC message, which once received by Pidgin,
    would lead to a denial of service (Pidgin crash). (CVE-2009-2703)
    
    It was discovered that, when connecting to certain, very old Jabber
    servers via XMPP, Pidgin may ignore the 'Require SSL/TLS' setting. In
    these situations, a non-encrypted connection is established rather
    than the connection failing, causing the user to believe they are
    using an encrypted connection when they are not, leading to sensitive
    information disclosure (session sniffing). (CVE-2009-3026)
    
    A NULL pointer dereference flaw was found in the way the Pidgin MSN
    protocol plug-in handles improper MSNSLP invitations. A remote
    attacker could send a specially crafted MSNSLP invitation request,
    which once accepted by a valid Pidgin user, would lead to a denial of
    service (Pidgin crash). (CVE-2009-3083)
    
    These packages upgrade Pidgin to version 2.6.2. Refer to the Pidgin
    release notes for a full list of changes:
    http://developer.pidgin.im/wiki/ChangeLog
    
    All Pidgin users should upgrade to these updated packages, which
    correct these issues. Pidgin must be restarted for this update to take
    effect."
      );
      # https://lists.centos.org/pipermail/centos-announce/2009-October/016269.html
      script_set_attribute(
        attribute:"see_also",
        value:"http://www.nessus.org/u?036a931b"
      );
      # https://lists.centos.org/pipermail/centos-announce/2009-October/016270.html
      script_set_attribute(
        attribute:"see_also",
        value:"http://www.nessus.org/u?54f49da8"
      );
      # https://lists.centos.org/pipermail/centos-announce/2009-September/016169.html
      script_set_attribute(
        attribute:"see_also",
        value:"http://www.nessus.org/u?2554a627"
      );
      # https://lists.centos.org/pipermail/centos-announce/2009-September/016170.html
      script_set_attribute(
        attribute:"see_also",
        value:"http://www.nessus.org/u?f93c75f0"
      );
      script_set_attribute(
        attribute:"solution", 
        value:"Update the affected pidgin packages."
      );
      script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P");
      script_set_cvss_temporal_vector("CVSS2#E:ND/RL:OF/RC:C");
      script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
      script_set_attribute(attribute:"exploit_available", value:"false");
      script_cwe_id(119, 310);
    
      script_set_attribute(attribute:"plugin_type", value:"local");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:finch");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:finch-devel");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:libpurple");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:libpurple-devel");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:libpurple-perl");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:libpurple-tcl");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:pidgin");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:pidgin-devel");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:pidgin-perl");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:centos:centos:4");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:centos:centos:5");
    
      script_set_attribute(attribute:"vuln_publication_date", value:"2009/08/31");
      script_set_attribute(attribute:"patch_publication_date", value:"2009/10/30");
      script_set_attribute(attribute:"plugin_publication_date", value:"2010/01/06");
      script_set_attribute(attribute:"generated_plugin", value:"current");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_copyright(english:"This script is Copyright (C) 2010-2019 and is owned by Tenable, Inc. or an Affiliate thereof.");
      script_family(english:"CentOS Local Security Checks");
    
      script_dependencies("ssh_get_info.nasl");
      script_require_keys("Host/local_checks_enabled", "Host/CentOS/release", "Host/CentOS/rpm-list");
    
      exit(0);
    }
    
    
    include("audit.inc");
    include("global_settings.inc");
    include("rpm.inc");
    
    
    if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
    release = get_kb_item("Host/CentOS/release");
    if (isnull(release) || "CentOS" >!< release) audit(AUDIT_OS_NOT, "CentOS");
    os_ver = pregmatch(pattern: "CentOS(?: Linux)? release ([0-9]+)", string:release);
    if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "CentOS");
    os_ver = os_ver[1];
    if (! preg(pattern:"^(4|5)([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "CentOS 4.x / 5.x", "CentOS " + os_ver);
    
    if (!get_kb_item("Host/CentOS/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
    
    
    cpu = get_kb_item("Host/cpu");
    if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
    if ("x86_64" >!< cpu && "ia64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "CentOS", cpu);
    
    
    flag = 0;
    if (rpm_check(release:"CentOS-4", cpu:"i386", reference:"finch-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"CentOS-4", cpu:"x86_64", reference:"finch-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"CentOS-4", cpu:"i386", reference:"finch-devel-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"CentOS-4", cpu:"x86_64", reference:"finch-devel-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"CentOS-4", cpu:"i386", reference:"libpurple-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"CentOS-4", cpu:"x86_64", reference:"libpurple-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"CentOS-4", cpu:"i386", reference:"libpurple-devel-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"CentOS-4", cpu:"x86_64", reference:"libpurple-devel-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"CentOS-4", cpu:"i386", reference:"libpurple-perl-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"CentOS-4", cpu:"x86_64", reference:"libpurple-perl-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"CentOS-4", cpu:"i386", reference:"libpurple-tcl-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"CentOS-4", cpu:"x86_64", reference:"libpurple-tcl-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"CentOS-4", cpu:"i386", reference:"pidgin-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"CentOS-4", cpu:"x86_64", reference:"pidgin-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"CentOS-4", cpu:"i386", reference:"pidgin-devel-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"CentOS-4", cpu:"x86_64", reference:"pidgin-devel-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"CentOS-4", cpu:"i386", reference:"pidgin-perl-2.6.2-2.el4")) flag++;
    if (rpm_check(release:"CentOS-4", cpu:"x86_64", reference:"pidgin-perl-2.6.2-2.el4")) flag++;
    
    if (rpm_check(release:"CentOS-5", reference:"finch-2.6.2-2.el5")) flag++;
    if (rpm_check(release:"CentOS-5", reference:"finch-devel-2.6.2-2.el5")) flag++;
    if (rpm_check(release:"CentOS-5", reference:"libpurple-2.6.2-2.el5")) flag++;
    if (rpm_check(release:"CentOS-5", reference:"libpurple-devel-2.6.2-2.el5")) flag++;
    if (rpm_check(release:"CentOS-5", reference:"libpurple-perl-2.6.2-2.el5")) flag++;
    if (rpm_check(release:"CentOS-5", reference:"libpurple-tcl-2.6.2-2.el5")) flag++;
    if (rpm_check(release:"CentOS-5", reference:"pidgin-2.6.2-2.el5")) flag++;
    if (rpm_check(release:"CentOS-5", reference:"pidgin-devel-2.6.2-2.el5")) flag++;
    if (rpm_check(release:"CentOS-5", reference:"pidgin-perl-2.6.2-2.el5")) flag++;
    
    
    if (flag)
    {
      security_report_v4(
        port       : 0,
        severity   : SECURITY_WARNING,
        extra      : rpm_report_get()
      );
      exit(0);
    }
    else
    {
      tested = pkg_tests_get();
      if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
      else audit(AUDIT_PACKAGE_NOT_INSTALLED, "finch / finch-devel / libpurple / libpurple-devel / libpurple-perl / etc");
    }
    
  • NASL familyMandriva Local Security Checks
    NASL idMANDRIVA_MDVSA-2009-230.NASL
    descriptionSecurity vulnerabilities has been identified and fixed in pidgin : The msn_slplink_process_msg function in libpurple/protocols/msn/slplink.c in libpurple, as used in Pidgin (formerly Gaim) before 2.5.9 and Adium 1.3.5 and earlier, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) by sending multiple crafted SLP (aka MSNSLP) messages to trigger an overwrite of an arbitrary memory location. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2009-1376 (CVE-2009-2694). Unspecified vulnerability in Pidgin 2.6.0 allows remote attackers to cause a denial of service (crash) via a link in a Yahoo IM (CVE-2009-3025) protocols/jabber/auth.c in libpurple in Pidgin 2.6.0, and possibly other versions, does not follow the require TLS/SSL preference when connecting to older Jabber servers that do not follow the XMPP specification, which causes libpurple to connect to the server without the expected encryption and allows remote attackers to sniff sessions (CVE-2009-3026). libpurple/protocols/irc/msgs.c in the IRC protocol plugin in libpurple in Pidgin before 2.6.2 allows remote IRC servers to cause a denial of service (NULL pointer dereference and application crash) via a TOPIC message that lacks a topic string (CVE-2009-2703). The msn_slp_sip_recv function in libpurple/protocols/msn/slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an SLP invite message that lacks certain required fields, as demonstrated by a malformed message from a KMess client (CVE-2009-3083). The msn_slp_process_msg function in libpurple/protocols/msn/slpcall.c in the MSN protocol plugin in libpurple 2.6.0 and 2.6.1, as used in Pidgin before 2.6.2, allows remote attackers to cause a denial of service (application crash) via a handwritten (aka Ink) message, related to an uninitialized variable and the incorrect UTF16-LE charset name (CVE-2009-3084). The XMPP protocol plugin in libpurple in Pidgin before 2.6.2 does not properly handle an error IQ stanza during an attempted fetch of a custom smiley, which allows remote attackers to cause a denial of service (application crash) via XHTML-IM content with cid: images (CVE-2009-3085). This update provides pidgin 2.6.2, which is not vulnerable to these issues.
    last seen2020-06-01
    modified2020-06-02
    plugin id40966
    published2009-09-14
    reporterThis script is Copyright (C) 2009-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/40966
    titleMandriva Linux Security Advisory : pidgin (MDVSA-2009:230)
  • NASL familySuSE Local Security Checks
    NASL idSUSE_11_2_FINCH-091024.NASL
    descriptionThis update of pidgin fixes the following issues : - CVE-2009-3026: CVSS v2 Base Score: 5.0 Allowed to send confidential data unencrypted even if SSL was chosen by user. - CVE-2009-3025: CVSS v2 Base Score: 4.3 Remote denial of service in yahoo IM plug-in. - CVE-2009-3083: CVSS v2 Base Score: 5.0 Remote denial of service in MSN plug-in. - CVE-2009-3084: CVSS v2 Base Score: 5.0 Remote denial of service in MSN plug-in. - CVE-2009-3085: CVSS v2 Base Score: 5.0 Remote denial of service in XMPP plug-in. - CVE-2009-3615: CVSS v2 Base Score: 5.0 Remote denial of service in ICQ plug-in. - QQ protocol upgrade Migrate all QQ accounts to QQ2008.
    last seen2020-06-01
    modified2020-06-02
    plugin id43054
    published2009-12-08
    reporterThis script is Copyright (C) 2009-2019 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/43054
    titleopenSUSE Security Update : finch (finch-1625)
  • NASL familyRed Hat Local Security Checks
    NASL idREDHAT-RHSA-2009-1453.NASL
    descriptionUpdated pidgin packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. Info/Query (IQ) is an Extensible Messaging and Presence Protocol (XMPP) specific request-response mechanism. A NULL pointer dereference flaw was found in the way the Pidgin XMPP protocol plug-in processes IQ error responses when trying to fetch a custom smiley. A remote client could send a specially crafted IQ error response that would crash Pidgin. (CVE-2009-3085) A NULL pointer dereference flaw was found in the way the Pidgin IRC protocol plug-in handles IRC topics. A malicious IRC server could send a specially crafted IRC TOPIC message, which once received by Pidgin, would lead to a denial of service (Pidgin crash). (CVE-2009-2703) It was discovered that, when connecting to certain, very old Jabber servers via XMPP, Pidgin may ignore the
    last seen2020-06-01
    modified2020-06-02
    plugin id41032
    published2009-09-22
    reporterThis script is Copyright (C) 2009-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/41032
    titleRHEL 4 / 5 : pidgin (RHSA-2009:1453)

Oval

  • accepted2013-04-29T04:12:28.480-04:00
    classvulnerability
    contributors
    • nameAharon Chernin
      organizationSCAP.com, LLC
    • nameDragos Prisaca
      organizationG2, Inc.
    definition_extensions
    • commentThe operating system installed on the system is Red Hat Enterprise Linux 4
      ovaloval:org.mitre.oval:def:11831
    • commentCentOS Linux 4.x
      ovaloval:org.mitre.oval:def:16636
    • commentOracle Linux 4.x
      ovaloval:org.mitre.oval:def:15990
    • commentThe operating system installed on the system is Red Hat Enterprise Linux 5
      ovaloval:org.mitre.oval:def:11414
    • commentThe operating system installed on the system is CentOS Linux 5.x
      ovaloval:org.mitre.oval:def:15802
    • commentOracle Linux 5.x
      ovaloval:org.mitre.oval:def:15459
    descriptionThe XMPP protocol plugin in libpurple in Pidgin before 2.6.2 does not properly handle an error IQ stanza during an attempted fetch of a custom smiley, which allows remote attackers to cause a denial of service (application crash) via XHTML-IM content with cid: images.
    familyunix
    idoval:org.mitre.oval:def:11223
    statusaccepted
    submitted2010-07-09T03:56:16-04:00
    titleThe XMPP protocol plugin in libpurple in Pidgin before 2.6.2 does not properly handle an error IQ stanza during an attempted fetch of a custom smiley, which allows remote attackers to cause a denial of service (application crash) via XHTML-IM content with cid: images.
    version27
  • accepted2013-09-09T04:03:43.967-04:00
    classvulnerability
    contributors
    • nameChandan S
      organizationSecPod Technologies
    • nameShane Shaffer
      organizationG2, Inc.
    definition_extensions
    commentPidgin is installed
    ovaloval:org.mitre.oval:def:12366
    descriptionThe XMPP protocol plugin in libpurple in Pidgin before 2.6.2 does not properly handle an error IQ stanza during an attempted fetch of a custom smiley, which allows remote attackers to cause a denial of service (application crash) via XHTML-IM content with cid: images.
    familywindows
    idoval:org.mitre.oval:def:6434
    statusaccepted
    submitted2009-09-24T01:41:17
    titlePidgin before 2.6.2 allow denial of service via XHTML-IM content
    version4

Redhat

advisories
bugzilla
id521853
titleCVE-2009-3085 Pidgin: NULL pointer dereference by processing a custom smiley (DoS)
oval
OR
  • commentRed Hat Enterprise Linux must be installed
    ovaloval:com.redhat.rhba:tst:20070304026
  • AND
    • commentRed Hat Enterprise Linux 4 is installed
      ovaloval:com.redhat.rhba:tst:20070304025
    • OR
      • AND
        • commentlibpurple-tcl is earlier than 0:2.6.2-2.el4
          ovaloval:com.redhat.rhsa:tst:20091453001
        • commentlibpurple-tcl is signed with Red Hat master key
          ovaloval:com.redhat.rhsa:tst:20081023014
      • AND
        • commentlibpurple-devel is earlier than 0:2.6.2-2.el4
          ovaloval:com.redhat.rhsa:tst:20091453003
        • commentlibpurple-devel is signed with Red Hat master key
          ovaloval:com.redhat.rhsa:tst:20081023004
      • AND
        • commentpidgin-perl is earlier than 0:2.6.2-2.el4
          ovaloval:com.redhat.rhsa:tst:20091453005
        • commentpidgin-perl is signed with Red Hat master key
          ovaloval:com.redhat.rhsa:tst:20081023002
      • AND
        • commentfinch-devel is earlier than 0:2.6.2-2.el4
          ovaloval:com.redhat.rhsa:tst:20091453007
        • commentfinch-devel is signed with Red Hat master key
          ovaloval:com.redhat.rhsa:tst:20081023010
      • AND
        • commentpidgin-devel is earlier than 0:2.6.2-2.el4
          ovaloval:com.redhat.rhsa:tst:20091453009
        • commentpidgin-devel is signed with Red Hat master key
          ovaloval:com.redhat.rhsa:tst:20081023006
      • AND
        • commentlibpurple-perl is earlier than 0:2.6.2-2.el4
          ovaloval:com.redhat.rhsa:tst:20091453011
        • commentlibpurple-perl is signed with Red Hat master key
          ovaloval:com.redhat.rhsa:tst:20081023016
      • AND
        • commentfinch is earlier than 0:2.6.2-2.el4
          ovaloval:com.redhat.rhsa:tst:20091453013
        • commentfinch is signed with Red Hat master key
          ovaloval:com.redhat.rhsa:tst:20081023018
      • AND
        • commentlibpurple is earlier than 0:2.6.2-2.el4
          ovaloval:com.redhat.rhsa:tst:20091453015
        • commentlibpurple is signed with Red Hat master key
          ovaloval:com.redhat.rhsa:tst:20081023012
      • AND
        • commentpidgin is earlier than 0:2.6.2-2.el4
          ovaloval:com.redhat.rhsa:tst:20091453017
        • commentpidgin is signed with Red Hat master key
          ovaloval:com.redhat.rhsa:tst:20080584002
  • AND
    • commentRed Hat Enterprise Linux 5 is installed
      ovaloval:com.redhat.rhba:tst:20070331005
    • OR
      • AND
        • commentlibpurple-devel is earlier than 0:2.6.2-2.el5
          ovaloval:com.redhat.rhsa:tst:20091453020
        • commentlibpurple-devel is signed with Red Hat redhatrelease key
          ovaloval:com.redhat.rhsa:tst:20080584021
      • AND
        • commentpidgin-perl is earlier than 0:2.6.2-2.el5
          ovaloval:com.redhat.rhsa:tst:20091453022
        • commentpidgin-perl is signed with Red Hat redhatrelease key
          ovaloval:com.redhat.rhsa:tst:20080584017
      • AND
        • commentfinch-devel is earlier than 0:2.6.2-2.el5
          ovaloval:com.redhat.rhsa:tst:20091453024
        • commentfinch-devel is signed with Red Hat redhatrelease key
          ovaloval:com.redhat.rhsa:tst:20080584009
      • AND
        • commentpidgin-devel is earlier than 0:2.6.2-2.el5
          ovaloval:com.redhat.rhsa:tst:20091453026
        • commentpidgin-devel is signed with Red Hat redhatrelease key
          ovaloval:com.redhat.rhsa:tst:20080584019
      • AND
        • commentlibpurple-perl is earlier than 0:2.6.2-2.el5
          ovaloval:com.redhat.rhsa:tst:20091453028
        • commentlibpurple-perl is signed with Red Hat redhatrelease key
          ovaloval:com.redhat.rhsa:tst:20080584015
      • AND
        • commentfinch is earlier than 0:2.6.2-2.el5
          ovaloval:com.redhat.rhsa:tst:20091453030
        • commentfinch is signed with Red Hat redhatrelease key
          ovaloval:com.redhat.rhsa:tst:20080584005
      • AND
        • commentlibpurple is earlier than 0:2.6.2-2.el5
          ovaloval:com.redhat.rhsa:tst:20091453032
        • commentlibpurple is signed with Red Hat redhatrelease key
          ovaloval:com.redhat.rhsa:tst:20080584007
      • AND
        • commentpidgin is earlier than 0:2.6.2-2.el5
          ovaloval:com.redhat.rhsa:tst:20091453034
        • commentpidgin is signed with Red Hat redhatrelease key
          ovaloval:com.redhat.rhsa:tst:20080584011
      • AND
        • commentlibpurple-tcl is earlier than 0:2.6.2-2.el5
          ovaloval:com.redhat.rhsa:tst:20091453036
        • commentlibpurple-tcl is signed with Red Hat redhatrelease key
          ovaloval:com.redhat.rhsa:tst:20080584013
rhsa
idRHSA-2009:1453
released2009-09-21
severityModerate
titleRHSA-2009:1453: pidgin security update (Moderate)
rpms
  • finch-0:2.6.2-2.el4
  • finch-0:2.6.2-2.el5
  • finch-devel-0:2.6.2-2.el4
  • finch-devel-0:2.6.2-2.el5
  • libpurple-0:2.6.2-2.el4
  • libpurple-0:2.6.2-2.el5
  • libpurple-devel-0:2.6.2-2.el4
  • libpurple-devel-0:2.6.2-2.el5
  • libpurple-perl-0:2.6.2-2.el4
  • libpurple-perl-0:2.6.2-2.el5
  • libpurple-tcl-0:2.6.2-2.el4
  • libpurple-tcl-0:2.6.2-2.el5
  • pidgin-0:2.6.2-2.el4
  • pidgin-0:2.6.2-2.el5
  • pidgin-debuginfo-0:2.6.2-2.el4
  • pidgin-debuginfo-0:2.6.2-2.el5
  • pidgin-devel-0:2.6.2-2.el4
  • pidgin-devel-0:2.6.2-2.el5
  • pidgin-perl-0:2.6.2-2.el4
  • pidgin-perl-0:2.6.2-2.el5