FreeBSD : pidgin -- MSN overflow parsing SLP messages (59e7af2d-8db7-11de-883b-001e3300a30d)

Critical Nessus Plugin ID 40691


The remote FreeBSD host is missing one or more security-related updates.


Secunia reports :

A vulnerability has been reported in Pidgin, which can be exploited by malicious people to potentially compromise a user's system.

The vulnerability is caused due to an error in the 'msn_slplink_process_msg()' function when processing MSN SLP messages and can be exploited to corrupt memory.

Successful exploitation may allow execution of arbitrary code.

The vulnerability is reported in versions 2.5.8 and prior. Other versions may also be affected.


Update the affected packages.

See Also

Plugin Details

Severity: Critical

ID: 40691

File Name: freebsd_pkg_59e7af2d8db711de883b001e3300a30d.nasl

Version: $Revision: 1.11 $

Type: local

Published: 2009/08/24

Modified: 2013/06/21

Dependencies: 12634

Risk Information

Risk Factor: Critical


Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: p-cpe:/a:freebsd:freebsd:finch, p-cpe:/a:freebsd:freebsd:libpurple, p-cpe:/a:freebsd:freebsd:pidgin, cpe:/o:freebsd:freebsd

Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2009/08/20

Vulnerability Publication Date: 2009/08/18

Exploitable With

Core Impact

Reference Information

CVE: CVE-2009-2694

Secunia: 36384

CWE: 399