CVE-2004-0006 - Secunia Advisories - Vulnerability Intelligence

CVE Reference: CVE-2004-0006
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2004-0006

Description: Multiple buffer overflows in Gaim 0.75 and earlier, and Ultramagnetic before 0.81, allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) cookies in a Yahoo web connection, (2) a long name parameter in the Yahoo login web page, (3) a long value parameter in the Yahoo login page, (4) a YMSG packet, (5) the URL parser, and (6) HTTP proxy connect.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/14947 http://xforce.iss.net/xforce/xfdb/14940 http://xforce.iss.net/xforce/xfdb/14941 http://xforce.iss.net/xforce/xfdb/14945 http://xforce.iss.net/xforce/xfdb/14943 http://xforce.iss.net/xforce/xfdb/14939 SUSE http://www.novell.com/linux/security/advisories/2004_04_gaim.html ST 1008850 SLACKWARE http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.361158 SGI REDHAT http://www.redhat.com/support/errata/RHSA-2004-045.html http://www.redhat.com/support/errata/RHSA-2004-033.html http://www.redhat.com/support/errata/RHSA-2004-032.html OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:818 OSVDB 3731 3732 MISC http://security.e-matters.de/advisories/012004.html MANDRAKE http://www.mandriva.com/security/advisories?name=MDKSA-2004:006 GENTOO http://security.gentoo.org/glsa/glsa-200401-04.xml FULLDISC http://archives.neohapsis.com/archives/fulldisclosure/2004-01/0994.html DEBIAN http://www.debian.org/security/2004/dsa-434 CONFIRM http://ultramagnetic.sourceforge.net/advisories/001.html CONECTIVA http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000813 CERT-VN 297198 371382 444158 503030 527142 871838 BUGTRAQ http://marc.theaimsgroup.com/?l=bugtraq&m=107522432613022&w=2 http://marc.theaimsgroup.com/?l=bugtraq&m=107513690306318&w=2 BID 9489

Return to the previous page.