CVE-2008-6393

Published: Mar 3, 2009Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

PSI Jabber client before 0.12.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a file transfer request with a negative value in a SOCKS5 option, which bypasses a signed integer check and triggers an integer overflow and a heap-based buffer overflow.

Affected (9)

Products: Psi Im: Psi

1 product

Configuration A

9 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Psi Im Psi	version ≤ 0.12
Psi Im Psi	Version 0.1.0
Psi Im Psi	Version 0.11
Psi Im Psi	Version 0.8.6
Psi Im Psi	Version 0.8.7
Psi Im Psi	Version 0.9.1
Psi Im Psi	Version 0.9.2
Psi Im Psi	Version 0.9.3
Psi Im Psi	Version 0.9

Running on/with	Platform Versions
Jabber Jabber Client	All versions

Related CWEs

References (28)

http://bugs.gentoo.org/show_bug.cgi?id=252830

Source: cve@mitre.org

Exploit

http://jolmos.blogspot.com/2008/12/psi-remote-integer-overflow.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html

Source: cve@mitre.org

http://secunia.com/advisories/33311

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/34119

Source: cve@mitre.org

http://secunia.com/advisories/34259

Source: cve@mitre.org

http://secunia.com/advisories/34301

Source: cve@mitre.org

http://sourceforge.net/project/shownotes.php?release_id=658912

Source: cve@mitre.org

Patch

http://www.debian.org/security/2009/dsa-1741

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2009/02/25/5

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/archive/1/499563

Source: cve@mitre.org

Exploit

https://www.exploit-db.com/exploits/7555

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00071.html

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00080.html

Source: cve@mitre.org

http://bugs.gentoo.org/show_bug.cgi?id=252830

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://jolmos.blogspot.com/2008/12/psi-remote-integer-overflow.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/33311

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/34119

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/34259

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/34301

Source: af854a3a-2127-422b-91ae-364da2661108

http://sourceforge.net/project/shownotes.php?release_id=658912

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.debian.org/security/2009/dsa-1741

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2009/02/25/5

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.securityfocus.com/archive/1/499563

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://www.exploit-db.com/exploits/7555

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00071.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00080.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.