• info
• discussion
• exploit
• solution
• references

Gaim Jabber File Request Remote Denial Of Service Vulnerability

Solution:
Vendor upgrades are available. Please see the referenced advisories for more information.


Rob Flynn Gaim 1.0

• Rob Flynn Gaim 1.2.1
  http://gaim.sourceforge.net/downloads.php


• Ubuntu gaim_1.0.0-1ubuntu1.4_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/g/gaim/gaim_1.0.0-1ubuntu1 .4_amd64.deb


• Ubuntu gaim_1.0.0-1ubuntu1.4_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/g/gaim/gaim_1.0.0-1ubuntu1 .4_i386.deb


• Ubuntu gaim_1.0.0-1ubuntu1.4_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/g/gaim/gaim_1.0.0-1ubuntu1 .4_powerpc.deb

Rob Flynn Gaim 1.0.1

• Fedora gaim-1.2.1-1.fc3.i386.rpm
  RedHat Fedora Core 3
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/


• Fedora gaim-1.2.1-1.fc3.x86_64.rpm
  RedHat Fedora Core 3
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/


• Fedora gaim-debuginfo-1.2.1-1.fc3.i386.rpm
  RedHat Fedora Core 3
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/


• Fedora gaim-debuginfo-1.2.1-1.fc3.x86_64.rpm
  RedHat Fedora Core 3
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/


• Rob Flynn Gaim 1.2.1
  http://gaim.sourceforge.net/downloads.php

Rob Flynn Gaim 1.0.2

• Rob Flynn Gaim 1.2.1
  http://gaim.sourceforge.net/downloads.php

Rob Flynn Gaim 1.1.1

• Rob Flynn Gaim 1.2.1
  http://gaim.sourceforge.net/downloads.php

Rob Flynn Gaim 1.1.2

• Rob Flynn Gaim 1.2.1
  http://gaim.sourceforge.net/downloads.php

Rob Flynn Gaim 1.1.3

• Rob Flynn Gaim 1.2.1
  http://gaim.sourceforge.net/downloads.php

Rob Flynn Gaim 1.1.4

• Rob Flynn Gaim 1.2.1
  http://gaim.sourceforge.net/downloads.php


• Ubuntu gaim-data_1.1.4-1ubuntu4.1_all.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/g/gaim/gaim-data_1.1.4-1ub untu4.1_all.deb


• Ubuntu gaim-dev_1.1.4-1ubuntu4.1_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/g/gaim/gaim-dev_1.1.4-1ubu ntu4.1_amd64.deb


• Ubuntu gaim-dev_1.1.4-1ubuntu4.1_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/g/gaim/gaim-dev_1.1.4-1ubu ntu4.1_i386.deb


• Ubuntu gaim-dev_1.1.4-1ubuntu4.1_ia64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/g/gaim/gaim-dev_1.1.4-1ubu ntu4.1_ia64.deb


• Ubuntu gaim-dev_1.1.4-1ubuntu4.1_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/g/gaim/gaim-dev_1.1.4-1ubu ntu4.1_powerpc.deb


• Ubuntu gaim_1.1.4-1ubuntu4.1_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/g/gaim/gaim_1.1.4-1ubuntu4 .1_amd64.deb


• Ubuntu gaim_1.1.4-1ubuntu4.1_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/g/gaim/gaim_1.1.4-1ubuntu4 .1_i386.deb


• Ubuntu gaim_1.1.4-1ubuntu4.1_ia64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/g/gaim/gaim_1.1.4-1ubuntu4 .1_ia64.deb


• Ubuntu gaim_1.1.4-1ubuntu4.1_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/g/gaim/gaim_1.1.4-1ubuntu4 .1_powerpc.deb

Rob Flynn Gaim 1.2

• Rob Flynn Gaim 1.2.1
  http://gaim.sourceforge.net/downloads.php

Slackware Linux 10.1

• Slackware gaim-1.3.0-i486-1.tgz
  Slackware 10.1:
  ftp://ftp.slackware.com/pub/slackware/slackware-10.1/patches/packages/ gaim-1.3.0-i486-1.tgz