PT-2019-6748 · Pidgin+1 · Pidgin+1

Publicado 2019-11-20 · Atualizado 2019-11-21 · CVE-2012-1257

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Pidgin version 2.10.0

Description The issue allows local users to obtain sensitive information via a dbus session monitor, as Pidgin 2.10.0 uses DBUS for certain cleartext communication.

Recommendations For Pidgin version 2.10.0, consider restricting access to the DBUS interface to minimize the risk of exploitation. As a temporary workaround, avoid using cleartext communication via DBUS until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Cleartext Transmission of Sensitive Information

Enumeração de Fraquezas

CWE-319

Identificadores relacionados

CVE-2012-1257

Produtos afetados

Debian

Pidgin

Referências · 14

• 🔥 https://exploit-db.com/exploits/36884 · Exploit
• https://ubuntu.com/security/CVE-2012-1257 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/source-package/pidgin · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2012-1257 · Aviso do Fabricante
• http://pidgin.im/pipermail/devel/2011-December/010521.html · Aviso do Fabricante
• http://seclists.org/fulldisclosure/2012/Feb/414 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-1257 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2012-1257 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1257 · Nota de Segurança
• https://packages.debian.org/src:pidgin · Nota
• https://security-tracker.debian.org/tracker/CVE-2012-1257 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-1257 · Aviso do Fabricante
• http://developer.pidgin.im/ticket/14830 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2012-1257 · Nota de Segurança