[33277] in bugtraq
GAIM Patch update
daemon@ATHENA.MIT.EDU (Stefan Esser)
Tue Jan 27 22:30:25 2004
Date: Tue, 27 Jan 2004 20:03:51 +0100
From: Stefan Esser <s.esser@e-matters.de>
To: full-disclosure@lists.netsys.com
Cc: bugtraq@securityfocus.com
Message-ID: <20040127190351.GA24371@php.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Hello,
there was a problem with the GAIM patch that was linked from my advisory
and is most probably part of the already released packages.
The old version of the patch lacked a variable increment, that eventually
creates a very long loop followed by a crash on malformed yahoo packets.
This problem was reported by: Joseph Martin
Cheers,
Stefan Esser
--
--------------------------------------------------------------------------
Stefan Esser s.esser@e-matters.de
e-matters Security http://security.e-matters.de/
GPG-Key gpg --keyserver pgp.mit.edu --recv-key 0xCF6CAE69
Key fingerprint B418 B290 ACC0 C8E5 8292 8B72 D6B0 7704 CF6C AE69
--------------------------------------------------------------------------
Did I help you? Consider a gift: http://wishlist.suspekt.org/
--------------------------------------------------------------------------
