Gaim before 0.82 allows remote servers to cause a denial of service (application crash) via a long HTTP Content-Length header, which causes Gaim to abort when attempting to allocate memory.

The remote host appears to be running Gaim, a popular open-source multi-protocol instant messenger. It is reported that this version of Gaim is prone to several buffer overflows in the MSN protocol implementation. This vulnerability may permit an attacker to execute arbitrary code on the remote computer.

0.82 update contains many bug and security improvements.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host appears to be running Gaim, a popular open-source multi-protocol instant messenger. It is reported that this version of Gaim is prone to multiple vulnerabilities including several buffer and heap overflows. These vulnerabilities may permit an attacker to execute arbitrary code on the remote computer.

ID	Name	Product	Family	Severity
2160	Gaim < 0.82 MSN Protocol Buffer Overflow	Nessus Network Monitor	Internet Messengers	medium
14374	Fedora Core 2 : gaim-0.82-0.FC2 (2004-279)	Nessus	Fedora Local Security Checks	high
14373	Fedora Core 1 : gaim-0.82-0.FC1 (2004-278)	Nessus	Fedora Local Security Checks	high
2159	Gaim < 0.82 Multiple Overflows	Nessus Network Monitor	Internet Messengers	medium

Detections

Analytics

CVE-2004-2589

high

Tenable Plugins

medium

high

high

medium