Fedora 9 : bitlbee-1.2.3-1.fc9 (2008-7830)

High Nessus Plugin ID 34176


The remote Fedora host is missing a security update.


Upstream released Bitlbee 1.2.3 with the following changes to the former release: - Fixed one more flaw similar to the previous hijacking bug, caused by inconsistent handling of the USTATUS_IDENTIFIED state. All code touching these variables was reviewed and should be correct now. Finished 7 Sep 2008

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.


Update the affected bitlbee package.

See Also



Plugin Details

Severity: High

ID: 34176

File Name: fedora_2008-7830.nasl

Version: $Revision: 1.10 $

Type: local

Agent: unix

Published: 2008/09/12

Modified: 2015/10/21

Dependencies: 12634

Risk Information

Risk Factor: High


Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Information

CPE: p-cpe:/a:fedoraproject:fedora:bitlbee, cpe:/o:fedoraproject:fedora:9

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list

Patch Publication Date: 2008/09/11

Reference Information

CVE: CVE-2008-3920

FEDORA: 2008-7830

CWE: 264