National Cyber Awareness System

Vulnerability Summary for CVE-2011-1000

Overview

jingle-factory.c in Telepathy Gabble 0.11 before 0.11.7, 0.10 before 0.10.5, and 0.8 before 0.8.15 allows remote attackers to sniff audio and video calls via a crafted google:jingleinfo stanza that specifies an alternate server for streamed media.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: CONFIRM

Name: https://bugs.freedesktop.org/show_bug.cgi?id=34048

Type: Patch Information

Hyperlink:https://bugs.freedesktop.org/show_bug.cgi?id=34048

External Source: MLIST

Name: [oss-security] 20110217 Re: CVE id request: telepathy-gabble

Type: Patch Information

Hyperlink:http://www.openwall.com/lists/oss-security/2011/02/17/7

External Source: MLIST

Name: [oss-security] 20110217 CVE id request: telepathy-gabble

Type: Patch Information

Hyperlink:http://www.openwall.com/lists/oss-security/2011/02/17/4

External Source: SUSE

Name: openSUSE-SU-2011:0303

Hyperlink:https://hermes.opensuse.org/messages/7848248

External Source: XF

Name: gabble-jingle-info-security-bypass(65523)

Hyperlink:http://xforce.iss.net/xforce/xfdb/65523

External Source: VUPEN

Name: ADV-2011-0901

Hyperlink:http://www.vupen.com/english/advisories/2011/0901

External Source: VUPEN

Name: ADV-2011-0572

Hyperlink:http://www.vupen.com/english/advisories/2011/0572

External Source: VUPEN

Name: ADV-2011-0537

Hyperlink:http://www.vupen.com/english/advisories/2011/0537

External Source: VUPEN

Name: ADV-2011-0428

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2011/0428

External Source: VUPEN

Name: ADV-2011-0412

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2011/0412

External Source: UBUNTU

Name: USN-1067-1

Hyperlink:http://www.ubuntu.com/usn/USN-1067-1

External Source: BID

Name: 46440

Hyperlink:http://www.securityfocus.com/bid/46440

External Source: DEBIAN

Name: DSA-2169

Hyperlink:http://www.debian.org/security/2011/dsa-2169

External Source: SECUNIA

Name: 44023

Hyperlink:http://secunia.com/advisories/44023

External Source: SECUNIA

Name: 43545

Hyperlink:http://secunia.com/advisories/43545

External Source: SECUNIA

Name: 43485

Hyperlink:http://secunia.com/advisories/43485

External Source: SECUNIA

Name: 43404

Type: Advisory

Hyperlink:http://secunia.com/advisories/43404

External Source: SECUNIA

Name: 43369

Type: Advisory

Hyperlink:http://secunia.com/advisories/43369

External Source: SECUNIA

Name: 43316

Type: Advisory

Hyperlink:http://secunia.com/advisories/43316

External Source: FEDORA

Name: FEDORA-2011-1284

Hyperlink:http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054575.html

External Source: FEDORA

Name: FEDORA-2011-1903

Hyperlink:http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054409.html

External Source: FEDORA

Name: FEDORA-2011-1668

Hyperlink:http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054324.html