PT-2011-2805 · Telepathy · Telepathy Gabble

Will Thompson · Publicado 2011-02-18 · Atualizado 2024-06-15 · CVE-2011-1000

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Telepathy Gabble versions 0.8 through 0.8.14 Telepathy Gabble versions 0.10 through 0.10.4 Telepathy Gabble versions 0.11 through 0.11.6

Description The issue allows remote attackers to intercept audio and video calls by using a crafted google:jingleinfo stanza. This stanza specifies an alternate server for streamed media, enabling the attacker to sniff the calls.

Recommendations For versions 0.8 through 0.8.14, update to version 0.8.15 or later. For versions 0.10 through 0.10.4, update to version 0.10.5 or later. For versions 0.11 through 0.11.6, update to version 0.11.7 or later.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2011-1000

DSA-2169-1

OPENSUSE-SU-2024:10079-1

Produtos afetados

Telepathy Gabble

Referências · 26

• http://secunia.com/advisories/43545 · Nota
• https://hermes.opensuse.org/messages/7848248 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2011/02/17/4 · Correção
• http://openwall.com/lists/oss-security/2011/02/17/7 · Correção
• http://secunia.com/advisories/44023 · Nota
• https://bugs.freedesktop.org/show_bug.cgi?id=34048 · Correção
• http://vupen.com/english/advisories/2011/0901 · Nota
• http://ubuntu.com/usn/USN-1067-1 · Aviso do Fabricante
• http://secunia.com/advisories/43404 · Aviso do Fabricante
• http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054324.html · Aviso do Fabricante
• http://securityfocus.com/bid/46440 · Nota
• http://secunia.com/advisories/43316 · Aviso do Fabricante
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054409.html · Aviso do Fabricante
• https://osv.dev/vulnerability/openSUSE-SU-2024:10079-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2013-1431 · Nota