jingle-factory.c in Telepathy Gabble 0.11 before 0.11.7, 0.10 before 0.10.5, and 0.8 before 0.8.15 allows remote attackers to sniff audio and video calls via a crafted google:jingleinfo stanza that specifies an alternate server for streamed media.

This update of telepathy-gabble is validating the origin of a google:jingleinfo update message now. Not validating the origin could be used to intercept calls. CVE-2011-1000: CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:P/A:N): Input Validation (CWE-20)

Telepathy-Gabble changes, including a security fix :

  - fd.o#32390: Gabble now treats a request for a     ContactSearch channel with Server set to the empty     string as equivalent to not specifying a server, and     rejects requests where the JID specified for Server is     invalid.

    - fd.o#32874: Offline contacts are now assumed to       support 1-1 text channels.

    - fd.o#34048: Malicious contacts can no longer trick       Gabble into relaying audio/video data via a server of       their choosing.

    - fd.o#32815: fallback-conference-server now defaults to       conference.telepathy.im. Thus, if the user's server       doesn't have a conference component configured,       upgrading a 1-1 chat into an ad-hoc conference still       works.

    - fd.o#11291: support for xep-0092, Software Version.

    - fd.o#33471: support for the FileTransfer.URI property.

Telepathy-Glib Enhancements include :

  - Many doc fixes, including: TpBaseClientClass is now     included; INCOMING_MESSAGES is now explained.

    - Compiler flags reordered (clang is order-sensitive) to       allow static analysis.

    - Account Channel Requests now give you access to the       originating TpChannelRequest.

    - The speculative debug cache may now be disabled at       compile time. tp_debug_sender_add_message_vprintf and       tp_debug_sender_add_message_printf added to allow       callers who care about optimisation to reduce debug       overhead.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Fedora host is missing one or more security updates :

telepathy-glib-0.11.16-2.fc13 :

  - Sun Feb 20 2011 Brian Pepple <bpepple at     fedoraproject.org> - 0.11.16-2

    - Drop devel require on tp-glib-vala.

    - Sun Feb 20 2011 Brian Pepple <bpepple at       fedoraproject.org> - 0.11.16-1

    - Update to 0.11.16.

    - Bump min version of glib required.

    - Tue Jun 22 2010 Brian Pepple <bpepple at       fedoraproject.org> - 0.10.7-1

    - Update to 0.10.7.

    - Tue May 25 2010 Brian Pepple <bpepple at       fedoraproject.org> - 0.10.6-1

    - Update to 0.10.6.

    - Wed Apr 28 2010 Brian Pepple <bpepple at       fedoraproject.org> - 0.10.5-1

    - Update to 0.10.5.

    - Tue Apr 20 2010 Brian Pepple <bpepple at       fedoraproject.org> - 0.10.4-1

    - Update to 0.10.4.

telepathy-gabble-0.10.5-1.fc13 :

  - Wed Feb 16 2011 Brian Pepple <bpepple at     fedoraproject.org> - 0.10.5-1

    - Update to 0.10.5.

    - Bump min BR of glib2.

    - Add requires on tp-mission-control. Refer to NEWS       file.

    - Add BR on cyrus-sasl-devel for wocky test.

    - Add BR on libnice-devel

    - Add BR for sqlite-devel.

    - Bump min req for tp-glib.

    - Drop fedora cert patch. Fixed upstream.

    - Sat Jul 10 2010 Brian Pepple <bpepple at       fedoraproject.org> - 0.9.11-2

    - Add patch to use Fedora's ssl certs. (#600532)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security bugfix release that includes the following :

  - fd.o #31412: fix crashes during disconnection if a PEP     alias request is in-flight

    - fd.o#34048: Malicious contacts can no longer trick       Gabble into relaying audio/video data via a server of       their choosing.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that Gabble did not verify the from field of google jingleinfo updates. This could allow a remote attacker to perform man in the middle attacks (MITM) on streamed media.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
75755	openSUSE Security Update : telepathy-gabble (openSUSE-SU-2011:0303-1)	Nessus	SuSE Local Security Checks	medium
53804	openSUSE Security Update : telepathy-gabble (openSUSE-SU-2011:0303-1)	Nessus	SuSE Local Security Checks	medium
52515	Fedora 15 : telepathy-gabble-0.11.7-1.fc15 / telepathy-glib-0.13.13-1.fc15 (2011-1284)	Nessus	Fedora Local Security Checks	medium
52467	Fedora 13 : telepathy-gabble-0.10.5-1.fc13 / telepathy-glib-0.11.16-2.fc13 (2011-1903)	Nessus	Fedora Local Security Checks	medium
52159	Fedora 14 : telepathy-gabble-0.10.5-1.fc14 (2011-1668)	Nessus	Fedora Local Security Checks	medium
52023	Ubuntu 9.10 / 10.04 LTS / 10.10 : telepathy-gabble vulnerability (USN-1067-1)	Nessus	Ubuntu Local Security Checks	medium

Detections

Analytics

CVE-2011-1000

critical

Tenable Plugins

medium

medium

medium

medium

medium

medium