A format string flaw was found in the way Ekiga processes certain messages. If a user is running Ekiga, a remote attacker who can connect to Ekiga could trigger this flaw and potentially execute arbitrary code with the privileges of the user.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A format string flaw was found in the way Ekiga processes certain messages form remote clients. This flaw could potentially allow a remote attacker to execute arbitrary code as the user running Ekiga.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Mu Security discovered a format string vulnerability in Ekiga. If a user was running Ekiga and listening for incoming calls, a remote attacker could send a crafted call request, and execute arbitrary code with the user's privileges.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

セキュリティの問題を修正する更新済みの ekiga パッケージが、Red Hat Enterprise Linux 5 で現在利用可能です。

Red Hat セキュリティレスポンスチームは、この更新には重大なセキュリティインパクトがあるものとして評価しています。

Ekiga は、インターネット上で映像と音声で通信するためのツールです。

書式文字列の欠陥が、Ekiga が特定のメッセージを処理する方法で見つかりました。ユーザーが Ekiga を実行している場合は、リモートの攻撃者が Ekiga に接続できる場合、この欠陥を発生させ、ユーザーの権限で任意のコードを実行する可能性があります。（CVE-2007-0999、 CVE-2007-1006）

Ekiga のユーザーは、バックポートされたパッチが含まれるこれらの更新済みパッケージへアップグレードし、この問題を解決する必要があります。

The remote host is affected by the vulnerability described in GLSA-200703-25 (Ekiga: Format string vulnerability)

    Mu Security has discovered that Ekiga fails to implement formatted     printing correctly.
  Impact :

    An attacker could exploit this vulnerability to crash Ekiga and     potentially execute arbitrary code by sending a specially crafted Q.931     SETUP packet to a victim.
  Workaround :

    There is no known workaround at this time.

This update fixes format string problems in ekiga. (CVE-2007-1006)

Updated ekiga packages that fix security issues are now available for Red Hat Enterprise Linux 5.

This update has been rated as having critical security impact by the Red Hat Security Response Team.

Ekiga is a tool to communicate with video and audio over the Internet.

Format string flaws were found in the way Ekiga processes certain messages. If a user is running Ekiga, a remote attacker who can connect to Ekiga could trigger this flaw and potentially execute arbitrary code with the privileges of the user. (CVE-2007-0999, CVE-2007-1006)

Users of Ekiga should upgrade to these updated packages which contain a backported patch to correct this issue.

A format string flaw was discovered in how ekiga processes certain messages, which could permit a remote attacker that can connect to ekiga to potentially execute arbitrary code with the privileges of the user running ekiga.

Updated package have been patched to correct this issue.

現已提供適用於 Red Hat Enterprise Linux 5 的更新版 ekiga 套件，可修正多個安全性問題。

Red Hat 安全性回應團隊已將此更新評等為具有重大安全性影響。

ekiga 是用於透過網際網路來使用視訊和音訊進行通訊的工具。

在 ekiga 處理特定訊息的方式中發現格式字串瑕疵。如果使用者執行 ekiga，可連線至 ekiga 的遠端攻擊者可觸發此瑕疵，並可能以使用者的權限執行任意程式碼。(CVE-2007-0999、CVE-2007-1006)

Ekiga 使用者應升級至這些更新版套件，其包含可更正此問題的一個反向移植修補程式。

更新后的 ekiga 程序包修复了若干安全问题，现在可用于 Red Hat Enterprise Linux 5。

Red Hat 安全响应团队将此更新评级为具有严重安全影响。

Ekiga 是用于在 Internet 上与视频和音频进行通信的工具。

在 Ekiga 处理某些消息的方式中发现格式字符串缺陷。如果用户正在运行 Ekiga，能够连接到 Ekiga 的远程攻击者可触发此缺陷并可能以该用户的权限执行任意代码。（CVE-2007-0999、CVE-2007-1006）

Ekiga 用户应升级到这些更新后的程序包，其中包含用于修正此问题的向后移植的修补程序。

ID	名稱	產品	系列	已發布	已更新	嚴重性
24694	Fedora Core 6 : ekiga-2.0.5-2.fc6 (2007-263)	Nessus	Fedora Local Security Checks	2007/2/23	2021/1/11	critical
24693	Fedora Core 5 : ekiga-2.0.1-4 (2007-262)	Nessus	Fedora Local Security Checks	2007/2/23	2021/1/11	critical
28019	Ubuntu 5.10 / 6.06 LTS / 6.10 : ekiga, gnomemeeting vulnerabilities (USN-426-1)	Nessus	Ubuntu Local Security Checks	2007/11/10	2021/1/19	critical
63840	RHEL 5：ekiga（RHSA-2007:0087）	Nessus	Red Hat Local Security Checks	2013/1/24	2021/1/14	critical
24930	GLSA-200703-25 : Ekiga: Format string vulnerability	Nessus	Gentoo Local Security Checks	2007/4/5	2021/1/6	critical
27203	openSUSE 10 Security Update : ekiga (ekiga-3023)	Nessus	SuSE Local Security Checks	2007/10/17	2021/1/14	critical
63840	RHEL 5 : ekiga (RHSA-2007:0087)	Nessus	Red Hat Local Security Checks	2013/1/24	2021/1/14	critical
24687	Mandrake Linux Security Advisory : ekiga (MDKSA-2007:044)	Nessus	Mandriva Local Security Checks	2007/2/22	2021/1/6	critical
63840	RHEL 5：ekiga (RHSA-2007:0087)	Nessus	Red Hat Local Security Checks	2013/1/24	2021/1/14	critical
63840	RHEL 5：ekiga (RHSA-2007:0087)	Nessus	Red Hat Local Security Checks	2013/1/24	2021/1/14	critical

偵測

搜尋 Plugin

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical