• info
• discussion
• exploit
• solution
• references

Gaim IRC Protocol Plug-in Markup Language Injection Vulnerability

Solution:
Vendor upgrades are available. Please see the referenced advisories for more information.


Rob Flynn Gaim 1.0

• Rob Flynn Gaim 1.2.1
  http://gaim.sourceforge.net/downloads.php


• Ubuntu gaim_1.0.0-1ubuntu1.3_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/g/gaim/gaim_1.0.0-1ubuntu1 .3_amd64.deb


• Ubuntu gaim_1.0.0-1ubuntu1.3_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/g/gaim/gaim_1.0.0-1ubuntu1 .3_i386.deb


• Ubuntu gaim_1.0.0-1ubuntu1.3_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/g/gaim/gaim_1.0.0-1ubuntu1 .3_powerpc.deb

Rob Flynn Gaim 1.0.1

• Fedora gaim-1.2.1-1.fc3.i386.rpm
  RedHat Fedora Core 3
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/


• Fedora gaim-1.2.1-1.fc3.x86_64.rpm
  RedHat Fedora Core 3
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/


• Fedora gaim-debuginfo-1.2.1-1.fc3.i386.rpm
  RedHat Fedora Core 3
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/


• Fedora gaim-debuginfo-1.2.1-1.fc3.x86_64.rpm
  RedHat Fedora Core 3
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/


• Rob Flynn Gaim 1.2.1
  http://gaim.sourceforge.net/downloads.php

Rob Flynn Gaim 1.0.2

• Rob Flynn Gaim 1.2.1
  http://gaim.sourceforge.net/downloads.php

Rob Flynn Gaim 1.1.1

• Rob Flynn Gaim 1.2.1
  http://gaim.sourceforge.net/downloads.php

Rob Flynn Gaim 1.1.2

• Rob Flynn Gaim 1.2.1
  http://gaim.sourceforge.net/downloads.php

Rob Flynn Gaim 1.1.3

• Rob Flynn Gaim 1.2.1
  http://gaim.sourceforge.net/downloads.php

Rob Flynn Gaim 1.1.4

• Rob Flynn Gaim 1.2.1
  http://gaim.sourceforge.net/downloads.php

Rob Flynn Gaim 1.2

• Rob Flynn Gaim 1.2.1
  http://gaim.sourceforge.net/downloads.php

Slackware Linux 10.1

• Slackware gaim-1.3.0-i486-1.tgz
  Slackware 10.1:
  ftp://ftp.slackware.com/pub/slackware/slackware-10.1/patches/packages/ gaim-1.3.0-i486-1.tgz