CVE - CVE-2010-0013 (under review)

CVE-ID
CVE-2010-0013 (under review)	Learn more at National Vulnerability Database (NVD) • Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings
Description
Directory traversal vulnerability in slp.c in the MSN protocol plugin in libpurple in Pidgin 2.6.4 and Adium 1.3.8 allows remote attackers to read arbitrary files via a .. (dot dot) in an application/x-msnmsgrp2p MSN emoticon (aka custom smiley) request, a related issue to CVE-2004-0122. NOTE: it could be argued that this is resultant from a vulnerability in which an emoticon download request is processed even without a preceding text/x-mms-emoticon message that announced availability of the emoticon.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MLIST:[oss-security] 20100102 CVE request - pidgin MSN arbitrary file upload URL:http://www.openwall.com/lists/oss-security/2010/01/02/1 MLIST:[oss-security] 20100107 Re: CVE request - pidgin MSN arbitrary file upload URL:http://www.openwall.com/lists/oss-security/2010/01/07/1 MLIST:[oss-security] 20100107 Re: CVE request - pidgin MSN arbitrary file upload URL:http://www.openwall.com/lists/oss-security/2010/01/07/2 MISC:http://d.pidgin.im/viewmtn/revision/info/3d02401cf232459fc80c0837d31e05fae7ae5467 MISC:http://d.pidgin.im/viewmtn/revision/info/4be2df4f72bd8a55cdae7f2554b73342a497c92f MISC:http://events.ccc.de/congress/2009/Fahrplan/events/3596.en.html CONFIRM:http://d.pidgin.im/viewmtn/revision/info/c64a1adc8bda2b4aeaae1f273541afbc4f71b810 CONFIRM:http://developer.pidgin.im/viewmtn/revision/diff/3d02401cf232459fc80c0837d31e05fae7ae5467/with/c64a1adc8bda2b4aeaae1f273541afbc4f71b810/libpurple/protocols/msn/slp.c CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=552483 FEDORA:FEDORA-2010-0368 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-January/033771.html FEDORA:FEDORA-2010-0429 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-January/033848.html MANDRIVA:MDVSA-2010:085 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2010:085 SUNALERT:277450 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-66-277450-1 SUNALERT:1022203 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-77-1022203.1-1 SUSE:SUSE-SR:2010:006 URL:http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html OVAL:oval:org.mitre.oval:def:10333 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10333 SECUNIA:37953 URL:http://secunia.com/advisories/37953 SECUNIA:37954 URL:http://secunia.com/advisories/37954 SECUNIA:38915 URL:http://secunia.com/advisories/38915 SECUNIA:37961 URL:http://secunia.com/advisories/37961 VUPEN:ADV-2009-3662 URL:http://www.vupen.com/english/advisories/2009/3662 VUPEN:ADV-2009-3663 URL:http://www.vupen.com/english/advisories/2009/3663 VUPEN:ADV-2010-1020 URL:http://www.vupen.com/english/advisories/2010/1020
Status
Candidate	This CVE Identifier has "Candidate" status and must be reviewed and accepted by the CVE Editorial Board before it can be updated to official "Entry" status on the CVE List. It may be modified or even rejected in the future.
Phase
Assigned (20091214)
Votes

Comments

Candidate assigned on 20091214 and proposed on N/A
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: cve@mitre.org