ekg Gadu Gadu client / libgadu multiple vulnerabilities updated since 05.07.2005
Published:		27.07.2005
Source:		FULL-DISCLOSURE
SecurityVulns ID:		4959
Type:		library
Level:		5/10
Description:		Symbolic links problem on temporary files creation. Unfiltered shell characters. Libgadu integer overflow. Multiple platform-specific problems.

Affected:		KDE : KDE 3.3
		EKG : ekg 1.5
		CENTERICQ : centericq 4.20
		GNU : gadu 2.2
		KADU : Kadu 0.4

Original document		GENTOO, [ GLSA 200507-26 ] GNU Gadu, CenterICQ, Kadu, EKG, libgadu: Remote code execution in Gadu library (27.07.2005)
		Wojtek Kaniewski, Multiple vulnerabilities in libgadu and ekg package (22.07.2005)
		DEBIAN, [SECURITY] [DSA 760-1] New ekg packages fix several vulnerabilities (19.07.2005)
		ZATAZ.net, [Full-disclosure] ekg insecure temporary file creation and arbitrary code execution (05.07.2005)

Discuss:

Read or add your comments to this news (0 comments)