Download
| Alert*
oval:org.secpod.oval:def:84616
The host is installed with Pidgin before 2.14.9 and is prone to an improper certificate validation vulnerability. A flaw is present in the application, which fails to properly handle issues in validation of DNS responses. On successful exploitation, an attacker can redirect a client connection to a ... oval:org.secpod.oval:def:3301158 SUSE Security Update: Security update for pidgin oval:org.secpod.oval:def:1701469 An issue was discovered in Pidgin before 2.14.9. A remote attacker who can spoof DNS responses can redirect a client connection to a malicious server. The client will perform TLS certificate verification of the malicious domain name instead of the original XMPP service domain, allowing the attacker ... oval:org.secpod.oval:def:83373 The host is installed with Pidgin before 2.14.9 and is prone to a DNS spoofing vulnerability. A flaw is present in the application, which fails to validate the TLS certificate. On successful exploitation, the client can perform TLS certificate verification of the malicious domain name instead of the ... oval:org.secpod.oval:def:122217 Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just add an ac ... oval:org.secpod.oval:def:122173 Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just add an ac ... oval:org.secpod.oval:def:122177 Pidgin allows you to talk to anyone using a variety of messaging protocols including AIM, MSN, Yahoo!, Jabber, Bonjour, Gadu-Gadu, ICQ, IRC, Novell Groupwise, QQ, Lotus Sametime, Simple and Zephyr. These protocols are implemented using a modular, easy to use design. To use a protocol, just add an ac ... |