PSI Jabber client before 0.12.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a file transfer request with a negative value in a SOCKS5 option, which bypasses a signed integer check and triggers an integer overflow and a heap-based buffer overflow.

Remote attackers could crash the Psi instant messaging client via the file transfer port (CVE-2008-6393).

This is a bugfix-only update to version 0.12.1 New in 0.12.1 - Bugfix for DOS vulnerability in the file transfer code. Thanks to Jesus Olmos (jolmos at isecauditors.com)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Jesus Olmos Gonzalez discovered that an integer overflow in the PSI Jabber client may lead to remote denial of service.

This is a security-bugfix-only update to version 0.12.1 fixing a DOS vulnerability. New in 0.12.1 - Bugfix for DOS vulnerability in the file transfer code. Thanks to Jesus Olmos (jolmos at isecauditors.com)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
40300	openSUSE Security Update : psi (psi-574)	Nessus	SuSE Local Security Checks	critical
40114	openSUSE Security Update : psi (psi-574)	Nessus	SuSE Local Security Checks	critical
36996	Fedora 10 : psi-0.12.1-1.fc10 (2009-2285)	Nessus	Fedora Local Security Checks	critical
35992	Debian DSA-1741-1 : psi - integer overflow	Nessus	Debian Local Security Checks	critical
35785	openSUSE 10 Security Update : psi (psi-6042)	Nessus	SuSE Local Security Checks	critical
35769	Fedora 9 : psi-0.12.1-1.fc9 (2009-2295)	Nessus	Fedora Local Security Checks	critical

Detections

Analytics

CVE-2008-6393

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical