Test Kennung:	1.3.6.1.4.1.25623.1.0.831350
Kategorie:	Mandrake Local Security Checks
Titel:	Mandriva Update for pidgin MDVSA-2011:050 (pidgin)
Zusammenfassung:	The remote host is missing an update for the 'pidgin'; package(s) announced via the referenced advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'pidgin' package(s) announced via the referenced advisory. Vulnerability Insight: Multiple vulnerabilities has been identified and fixed in pidgin: It was discovered that libpurple versions prior to 2.7.10 do not properly clear certain data structures used in libpurple/cipher.c prior to freeing. An attacker could potentially extract partial information from memory regions freed by libpurple. The Yahoo protocol plugin in libpurple versions 2.6.0 through 2.7.10 do not properly handle malformed YMSG packets, leading to NULL pointer dereferences and application crash (CVE-2011-1091). Packages for 2009.0 are provided as of the Extended Maintenance Program. This update provides pidgin 2.7.11, which is not vulnerable to these issues. Affected Software/OS: pidgin on Mandriva Linux 2009.0, Mandriva Linux 2009.0/X86_64, Mandriva Linux 2010.0, Mandriva Linux 2010.0/X86_64, Mandriva Linux 2010.1, Mandriva Linux 2010.1/X86_64, Mandriva Enterprise Server 5, Mandriva Enterprise Server 5/X86_64 Solution: Please Install the Updated Packages. CVSS Score: 4.0 CVSS Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2011-1091 BugTraq ID: 46837 http://www.securityfocus.com/bid/46837 http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055874.html http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056309.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18402 http://www.redhat.com/support/errata/RHSA-2011-0616.html http://www.redhat.com/support/errata/RHSA-2011-1371.html http://secunia.com/advisories/43695 http://secunia.com/advisories/43721 http://secunia.com/advisories/46376 http://slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.466884 SuSE Security Announcement: openSUSE-SU-2012:0066 (Google Search) https://hermes.opensuse.org/messages/13195955 http://www.vupen.com/english/advisories/2011/0643 http://www.vupen.com/english/advisories/2011/0661 http://www.vupen.com/english/advisories/2011/0669 http://www.vupen.com/english/advisories/2011/0703 XForce ISS Database: pidgin-yahoo-protocol-dos(66055) https://exchange.xforce.ibmcloud.com/vulnerabilities/66055
Copyright	Copyright (c) 2011 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.