PT-2005-5588 · Gaim+3 · Gaim+3

Published 1970-01-01 · Updated 2018-10-19 · CVE-2005-2370

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions ekg versions prior to 1.6rc2 Gaim versions prior to 1.5.0 libgadu (affected versions not specified)

Description The issue is related to multiple memory alignment errors in libgadu, which can be exploited by remote attackers to cause a denial of service (bus error) on certain architectures, such as SPARC, via an incoming message. The vulnerability can lead to disruption of protected information and can be exploited remotely.

Recommendations For ekg versions prior to 1.6rc2, update to version 1.6rc2 or later. For Gaim versions prior to 1.5.0, update to version 1.5.0 or later. For libgadu, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-399

Related Identifiers

BDU:2015-03132

BDU:2015-03133

CVE-2005-2370

DSA-1318-1

DSA-769-1

DSA-813-1

DTSA-2-1

DTSA-5-1

RHSA-2005:639

RHSA-2005_627

RHSA-2005_639

Affected Products

Gaim

Red Hat

Ekg

Libgadu

References · 26

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2370 · Security Note
• https://bdu.fstec.ru/vul/2015-03132 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1665 · Security Note
• http://securityfocus.com/archive/1/426078/100/0/threaded · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1663 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1664 · Security Note
• http://secunia.com/advisories/16265 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2005-627.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-2370 · Security Note
• https://bdu.fstec.ru/vul/2015-03133 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2448 · Security Note
• http://debian.org/security/2007/dsa-1318 · Vendor Advisory
• http://debian.org/security/2005/dsa-813 · Vendor Advisory
• https://rhn.redhat.com/errata/RHSA-2005-627.html · Note
• https://redhat.com/security/data/cve/CVE-2005-2103.html · Note