CVE

Id
8434  
CVE No.
CVE-2004-0006  
Status
Candidate  
Description
Multiple buffer overflows in Gaim 0.75 and earlier, and Ultramagnetic before 0.81, allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) cookies in a Yahoo web connection, (2) a long name parameter in the Yahoo login web page, (3) a long value parameter in the Yahoo login page, (4) a YMSG packet, (5) the URL parser, and (6) HTTP proxy connect.  
Phase
Modified (20100819)  
Votes
ACCEPT(5) Armstrong, Baker, Cole, Cox, Green | NOOP(2) Christey, Wall  
Comments
Cox> Although the 0.59.1 version of Gaim shipped by Red Hat contained these | flaws, Yahoo connections were not functional and therefore the majority of | the issues could not be exploited, leading to the abstraction comment above. | Christey> CERT-VN:VU#871838 | URL:http://www.kb.cert.org/vuls/id/871838 | CERT-VN:VU#444158 | URL:http://www.kb.cert.org/vuls/id/444158 | CERT-VN:VU#503030 | URL:http://www.kb.cert.org/vuls/id/503030 | CERT-VN:VU#371382 | URL:http://www.kb.cert.org/vuls/id/371382 | CERT-VN:VU#297198 | URL:http://www.kb.cert.org/vuls/id/297198 | CERT-VN:VU#527142 | URL:http://www.kb.cert.org/vuls/id/527142 | Christey> Normalize Gentoo reference  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
51288 8434 CVE-2004-0006 BUGTRAQ:20040126 Advisory 01/2004: 12 x Gaim remote overflows  View
51289 8434 CVE-2004-0006 URL:http://marc.info/?l=bugtraq&m=107513690306318&w=2  View
51290 8434 CVE-2004-0006 FULLDISC:20040126 Advisory 01/2004: 12 x Gaim remote overflows  View
51291 8434 CVE-2004-0006 URL:http://archives.neohapsis.com/archives/fulldisclosure/2004-01/0994.html  View
51292 8434 CVE-2004-0006 MISC:http://security.e-matters.de/advisories/012004.html  View
51293 8434 CVE-2004-0006 BUGTRAQ:20040127 Ultramagnetic Advisory #001: Multiple vulnerabilities in Gaim code  View
51294 8434 CVE-2004-0006 URL:http://marc.info/?l=bugtraq&m=107522432613022&w=2  View
51295 8434 CVE-2004-0006 CONFIRM:http://ultramagnetic.sourceforge.net/advisories/001.html  View
51296 8434 CVE-2004-0006 REDHAT:RHSA-2004:032  View
51297 8434 CVE-2004-0006 URL:http://www.redhat.com/support/errata/RHSA-2004-032.html  View
51298 8434 CVE-2004-0006 REDHAT:RHSA-2004:033  View
51299 8434 CVE-2004-0006 URL:http://www.redhat.com/support/errata/RHSA-2004-033.html  View
51300 8434 CVE-2004-0006 REDHAT:RHSA-2004:045  View
51301 8434 CVE-2004-0006 URL:http://www.redhat.com/support/errata/RHSA-2004-045.html  View
51302 8434 CVE-2004-0006 MANDRAKE:MDKSA-2004:006  View
51303 8434 CVE-2004-0006 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2004:006  View
51304 8434 CVE-2004-0006 SGI:20040202-01-U  View
51305 8434 CVE-2004-0006 URL:ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc  View
51306 8434 CVE-2004-0006 SUSE:SuSE-SA:2004:004  View
51307 8434 CVE-2004-0006 URL:http://www.novell.com/linux/security/advisories/2004_04_gaim.html  View
51308 8434 CVE-2004-0006 DEBIAN:DSA-434  View
51309 8434 CVE-2004-0006 URL:http://www.debian.org/security/2004/dsa-434  View
51310 8434 CVE-2004-0006 CONECTIVA:CLA-2004:813  View
51311 8434 CVE-2004-0006 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000813  View
51312 8434 CVE-2004-0006 SGI:20040201-01-U  View
51313 8434 CVE-2004-0006 URL:ftp://patches.sgi.com/support/free/security/advisories/20040201-01-U.asc  View
51314 8434 CVE-2004-0006 SLACKWARE:SSA:2004-026  View
51315 8434 CVE-2004-0006 URL:http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.361158  View
51316 8434 CVE-2004-0006 GENTOO:GLSA-200401-04  View
51317 8434 CVE-2004-0006 URL:http://security.gentoo.org/glsa/glsa-200401-04.xml  View
51318 8434 CVE-2004-0006 CERT-VN:VU#297198  View
51319 8434 CVE-2004-0006 URL:http://www.kb.cert.org/vuls/id/297198  View
51320 8434 CVE-2004-0006 CERT-VN:VU#371382  View
51321 8434 CVE-2004-0006 URL:http://www.kb.cert.org/vuls/id/371382  View
51322 8434 CVE-2004-0006 CERT-VN:VU#444158  View
51323 8434 CVE-2004-0006 URL:http://www.kb.cert.org/vuls/id/444158  View
51324 8434 CVE-2004-0006 CERT-VN:VU#503030  View
51325 8434 CVE-2004-0006 URL:http://www.kb.cert.org/vuls/id/503030  View
51326 8434 CVE-2004-0006 CERT-VN:VU#527142  View
51327 8434 CVE-2004-0006 URL:http://www.kb.cert.org/vuls/id/527142  View
51328 8434 CVE-2004-0006 CERT-VN:VU#871838  View
51329 8434 CVE-2004-0006 URL:http://www.kb.cert.org/vuls/id/871838  View
51330 8434 CVE-2004-0006 BID:9489  View
51331 8434 CVE-2004-0006 URL:http://www.securityfocus.com/bid/9489  View
51332 8434 CVE-2004-0006 OSVDB:3731  View
51333 8434 CVE-2004-0006 URL:http://www.osvdb.org/3731  View
51334 8434 CVE-2004-0006 OSVDB:3732  View
51335 8434 CVE-2004-0006 URL:http://www.osvdb.org/3732  View
51336 8434 CVE-2004-0006 OVAL:oval:org.mitre.oval:def:818  View
51337 8434 CVE-2004-0006 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:818  View
51338 8434 CVE-2004-0006 OVAL:oval:org.mitre.oval:def:10222  View
51339 8434 CVE-2004-0006 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10222  View
51340 8434 CVE-2004-0006 SECTRACK:1008850  View
51341 8434 CVE-2004-0006 URL:http://www.securitytracker.com/id?1008850  View
51342 8434 CVE-2004-0006 XF:gaim-http-proxy-bo(14947)  View
51343 8434 CVE-2004-0006 URL:http://xforce.iss.net/xforce/xfdb/14947  View
51344 8434 CVE-2004-0006 XF:gaim-login-name-bo(14940)  View
51345 8434 CVE-2004-0006 URL:http://xforce.iss.net/xforce/xfdb/14940  View
51346 8434 CVE-2004-0006 XF:gaim-login-value-bo(14941)  View
51347 8434 CVE-2004-0006 URL:http://xforce.iss.net/xforce/xfdb/14941  View
51348 8434 CVE-2004-0006 XF:gaim-urlparser-bo(14945)  View
51349 8434 CVE-2004-0006 URL:http://xforce.iss.net/xforce/xfdb/14945  View
51350 8434 CVE-2004-0006 XF:gaim-yahoopacketread-keyname-bo(14943)  View
51351 8434 CVE-2004-0006 URL:http://xforce.iss.net/xforce/xfdb/14943  View
51352 8434 CVE-2004-0006 XF:gaim-yahoowebpending-cookie-bo(14939)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62682 JVNDB-2004-000023 Gaim および Ultramagnetic の get_user_info() 関数におけるサービス運用妨害 (DoS) の脆弱性 ------------ CVE-2004-0007 8434 7.5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000023.html  View