Secunia Logo
Netsikker nu! 2008
 
Ubuntu update for gaim
Secunia Advisory: SA16423
Release Date: 2005-08-12
Popularity: 5,994 views

Critical:
Highly critical
Impact: DoS
System access
Where: From remote
Solution Status: Vendor Patch

OS:Ubuntu Linux 4.10
Ubuntu Linux 5.04

Subscribe: Instant alerts on relevant vulnerabilities

CVE reference:CVE-2005-2102
CVE-2005-2103
CVE-2005-2370


Description:
Ubuntu has issued an update for gaim. This fixes a vulnerability and two weaknesses, which can be exploited by malicious people to cause a DoS (Denial of Service) or compromise a user's system.

For more information:
SA16379
SA16265

Solution:
Apply updated packages.

-- Ubuntu 4.10 (Warty Warthog) --

Source archives:

http://security.ubuntu.com/ubuntu/pool/main/g/gaim/gaim_1.0.0-1ubuntu1.8.diff.gz
Size/MD5: 49554 19d8f02e32c2bfbb781961bc4b29b6c6
http://security.ubuntu.com/ubuntu/pool/main/g/gaim/gaim_1.0.0-1ubuntu1.8.dsc
Size/MD5: 853 07f788c5d240af40778e4b84a280b7e8
http://security.ubuntu.com/ubuntu/pool/main/g/gaim/gaim_1.0.0.orig.tar.gz
Size/MD5: 6985979 7dde686aace751a49dce734fd0cb7ace

amd64 architecture (Athlon64, Opteron, EM64T Xeon)

http://security.ubuntu.com/ubuntu/poo.../gaim/gaim_1.0.0-1ubuntu1.8_amd64.deb
Size/MD5: 3445098 39cc6718175688a9eb1c618552bd1144

i386 architecture (x86 compatible Intel/AMD)

http://security.ubuntu.com/ubuntu/poo...g/gaim/gaim_1.0.0-1ubuntu1.8_i386.deb
Size/MD5: 3355494 484ba99bfb13a57b46c2ac1bac02d4a7

powerpc architecture (Apple Macintosh G3/G4/G5)

http://security.ubuntu.com/ubuntu/poo...aim/gaim_1.0.0-1ubuntu1.8_powerpc.deb
Size/MD5: 3418764 7e6a6f488a4c9ea5f7df9ead0e9374c5

-- Ubuntu 5.04 (Hoary Hedgehog) --

Source archives:

http://security.ubuntu.com/ubuntu/pool/main/g/gaim/gaim_1.1.4-1ubuntu4.4.diff.gz
Size/MD5: 109435 fbb5c0bb0acf56ae1b30b883d434091a
http://security.ubuntu.com/ubuntu/pool/main/g/gaim/gaim_1.1.4-1ubuntu4.4.dsc
Size/MD5: 991 231442b5411b0b85206a8c11072eb938
http://security.ubuntu.com/ubuntu/pool/main/g/gaim/gaim_1.1.4.orig.tar.gz
Size/MD5: 5188552 b55bf3217b271918384f3f015a6e5b62

Architecture independent packages:

http://security.ubuntu.com/ubuntu/poo...im/gaim-data_1.1.4-1ubuntu4.4_all.deb
Size/MD5: 603832 187b963e949e4f2d7f72562a6c1c9842

amd64 architecture (Athlon64, Opteron, EM64T Xeon)

http://security.ubuntu.com/ubuntu/poo...m/gaim-dev_1.1.4-1ubuntu4.4_amd64.deb
Size/MD5: 101638 6e5f72417c9d69abf0fc2088d5daf583
http://security.ubuntu.com/ubuntu/poo.../gaim/gaim_1.1.4-1ubuntu4.4_amd64.deb
Size/MD5: 934286 739c508464a48d5fdbd3135354f23832

i386 architecture (x86 compatible Intel/AMD)

http://security.ubuntu.com/ubuntu/poo...im/gaim-dev_1.1.4-1ubuntu4.4_i386.deb
Size/MD5: 101638 66c79b84fe8ba9e3157c135749244b1b
http://security.ubuntu.com/ubuntu/poo...g/gaim/gaim_1.1.4-1ubuntu4.4_i386.deb
Size/MD5: 845702 66e2879305e03414e5e3f12ac4d6b863

powerpc architecture (Apple Macintosh G3/G4/G5)

http://security.ubuntu.com/ubuntu/poo...gaim-dev_1.1.4-1ubuntu4.4_powerpc.deb
Size/MD5: 101638 31ffb30d793c1d0913777c431f284441
http://security.ubuntu.com/ubuntu/poo...aim/gaim_1.1.4-1ubuntu4.4_powerpc.deb
Size/MD5: 910546 29bdc18bf2b6e4d97e708802a39dde85

Original Advisory:
http://www.ubuntulinux.org/support/documentation/usn/usn-168-1

Other References:
SA16379:
http://secunia.com/advisories/16379/

SA16265:
http://secunia.com/advisories/16265/


Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
  
Latest Advisories

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.

Most Popular - 3 Hours

1. VMware ESX Server Sun Java JDK / JRE Multiple Vulnerabilities // 47 views
2. phpBB Avatar Script Insertion Vulnerability // 46 views
3. Microsoft Windows Vista Page Fault Handling Denial of Service // 46 views
4. VMware VirtualCenter Multiple Vulnerabilities // 41 views
5. VMware ESX / ESXi "JMP" Privilege Escalation Vulnerability // 38 views
6. Serv-U File Renaming Directory Traversal and STOU Denial of Service // 33 views
7. Nucleus EUC-JP Cross-Site Scripting Vulnerability // 33 views
8. Subdreamer Light Global Variables SQL Injection Vulnerability // 32 views
9. JMweb MP3 Script "src" File Inclusion Vulnerabilities // 32 views
10. AmpJuke "special" SQL Injection Vulnerability // 32 views