Executive Summary
| Summary | |
|---|---|
| Title | Telepathy Gabble vulnerability |
| Informations | |||
|---|---|---|---|
| Name | USN-1067-1 | First vendor Publication | 2011-02-17 |
| Vendor | Ubuntu | Last vendor Modification | 2011-02-17 |
| Severity (Vendor) | N/A | Revision | N/A |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:P/I:P/A:N) | |||
|---|---|---|---|
| Cvss Base Score | 6.4 | Attack Range | Network |
| Cvss Impact Score | 4.9 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| A security issue affects the following Ubuntu releases: Ubuntu 9.10 Ubuntu 10.04 LTS Ubuntu 10.10 This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. The problem can be corrected by upgrading your system to the following package versions: Ubuntu 9.10: Ubuntu 10.04 LTS: Ubuntu 10.10: After a standard system update you need to restart your session to make all the necessary changes. Details follow: It was discovered that Gabble did not verify the from field of google jingleinfo updates. This could allow a remote attacker to perform man in the middle attacks (MITM) on streamed media. |
Original Source
| Url : http://www.ubuntu.com/usn/USN-1067-1 |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 100 % | CWE-20 | Improper Input Validation |
CPE : Common Platform Enumeration
OpenVAS Exploits
| Date | Description |
|---|---|
| 2011-03-07 | Name : Debian Security Advisory DSA 2169-1 (telepathy-gabble) File : nvt/deb_2169_1.nasl |
| 2011-03-07 | Name : Fedora Update for telepathy-gabble FEDORA-2011-1903 File : nvt/gb_fedora_2011_1903_telepathy-gabble_fc13.nasl |
| 2011-03-07 | Name : Fedora Update for telepathy-glib FEDORA-2011-1903 File : nvt/gb_fedora_2011_1903_telepathy-glib_fc13.nasl |
| 2011-02-28 | Name : Fedora Update for telepathy-gabble FEDORA-2011-1668 File : nvt/gb_fedora_2011_1668_telepathy-gabble_fc14.nasl |
| 2011-02-18 | Name : Ubuntu Update for telepathy-gabble vulnerability USN-1067-1 File : nvt/gb_ubuntu_USN_1067_1.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 72536 | Telepathy Gabble jingle-factory.c Crafted google:jingleinfo Stanza Remote Cal... |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2014-06-13 | Name : The remote openSUSE host is missing a security update. File : suse_11_3_telepathy-gabble-110222.nasl - Type : ACT_GATHER_INFO |
| 2011-05-05 | Name : The remote openSUSE host is missing a security update. File : suse_11_2_telepathy-gabble-110222.nasl - Type : ACT_GATHER_INFO |
| 2011-03-03 | Name : The remote Fedora host is missing one or more security updates. File : fedora_2011-1284.nasl - Type : ACT_GATHER_INFO |
| 2011-03-01 | Name : The remote Fedora host is missing one or more security updates. File : fedora_2011-1903.nasl - Type : ACT_GATHER_INFO |
| 2011-02-24 | Name : The remote Fedora host is missing a security update. File : fedora_2011-1668.nasl - Type : ACT_GATHER_INFO |
| 2011-02-18 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1067-1.nasl - Type : ACT_GATHER_INFO |
Alert History
| Date | Informations |
|---|---|
| 2014-02-17 11:58:18 |
|
