PT-2005-5589 · Ekg+2 · Ekg+2

Published 1970-01-01 · Updated 2017-10-11 · CVE-2005-2448

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions ekg versions prior to 1.6rc2

Description The issue is related to "endianness errors" in the libgadu library, which can cause a denial of service, leading to invalid behavior in applications on big-endian systems. Multiple vulnerabilities in the libgadu package can be exploited remotely, potentially disrupting the availability of protected information.

Recommendations For versions prior to 1.6rc2, update to version 1.6rc2 or later to resolve the issue. As a temporary workaround, consider restricting access to the libgadu library to minimize the risk of exploitation.

Fix

Related Identifiers

BDU:2015-03132

BDU:2015-03133

CVE-2005-2448

DSA-1318-1

DSA-813-1

DTSA-2-1

DTSA-4-1

RHSA-2005:639

RHSA-2005_639

Affected Products

Red Hat

Ekg

Libgadu

References · 23

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2370 · Security Note
• http://debian.org/security/2007/dsa-1318 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-03132 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1665 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1663 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2005-2448 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1664 · Security Note
• https://bdu.fstec.ru/vul/2015-03133 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2448 · Security Note
• http://debian.org/security/2005/dsa-813 · Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11263 · Note
• https://redhat.com/security/data/cve/CVE-2005-2448.html · Note
• http://securityfocus.com/bid/24600 · Note
• https://redhat.com/security/data/cve/CVE-2005-2369.html · Note
• http://secunia.com/advisories/16155 · Note