jetlib.sec » Tags » msn

Feeds

268045 items (2 unread) in 27 feeds

• 0day.today (was: 1337day, Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines (2 unread)
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

37 items tagged "msn"

Related tags: msn protocol [+], protocol [+], libpurple [+], messenger [+], red hat security [+], oim [+], mandriva linux [+], malicious server [+], live [+], input validation [+], hijacking [+], flaw [+], denial [+], vulnerability [+], txt [+], sim im [+], short [+], proof of concept [+], plugin [+], oscar [+], messenger version [+], hijack [+], exploits [+], dll [+], directory traversal vulnerability [+], darkc [+], windows [+], web applications [+], web [+], victimb [+], van jacobson [+], traceroute [+], target host [+], slplink [+], slp [+], question [+], process [+], null pointer [+], ntwk [+], msn messenger patch [+], msn emoticon [+], mitm [+], lfi [+], google [+], frozer [+], freezer [+], free [+], emoticon [+], computer thief [+], code execution [+], byte packets [+], apatch [+], activex [+], access 2 [+], Pentesting [+], Newbie [+], Area [+], service vulnerability [+], pidgin [+], denial of service [+]

• November 27, 2012
• 8:59

  [web applications] - MSN LFI Vulnerability

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  [web applications] - MSN LFI Vulnerability

  Tags:  msn web lfi web-applications vulnerability  

• October 10, 2012
• 0:00

  Vuln: Pidgin MSN Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Pidgin MSN Denial of Service Vulnerability

  Tags:  msn denial pidgin service-vulnerability denial-of-service  

• July 19, 2012
• 13:18

  Red Hat Security Advisory 2012-1102-01

   » ‎ Packet Storm Security Advisories
  Red Hat Security Advisory 2012-1102-01 - Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. A flaw was found in the way the Pidgin MSN protocol plug-in processed text that was not encoded in UTF-8. A remote attacker could use this flaw to crash Pidgin by sending a specially-crafted MSN message. An input validation flaw was found in the way the Pidgin MSN protocol plug-in handled MSN notification messages. A malicious server or a remote attacker could use this flaw to crash Pidgin by sending a specially-crafted MSN notification message.

  Tags:  msn pidgin flaw red-hat-security malicious-server input-validation  

• 13:18

  Red Hat Security Advisory 2012-1102-01

   » ‎ Packet Storm Security Recent Files
  Red Hat Security Advisory 2012-1102-01 - Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. A flaw was found in the way the Pidgin MSN protocol plug-in processed text that was not encoded in UTF-8. A remote attacker could use this flaw to crash Pidgin by sending a specially-crafted MSN message. An input validation flaw was found in the way the Pidgin MSN protocol plug-in handled MSN notification messages. A malicious server or a remote attacker could use this flaw to crash Pidgin by sending a specially-crafted MSN notification message.

  Tags:  msn pidgin flaw red-hat-security malicious-server input-validation  

• 13:18

  Red Hat Security Advisory 2012-1102-01

   » ‎ Packet Storm Security Misc. Files
  Red Hat Security Advisory 2012-1102-01 - Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. A flaw was found in the way the Pidgin MSN protocol plug-in processed text that was not encoded in UTF-8. A remote attacker could use this flaw to crash Pidgin by sending a specially-crafted MSN message. An input validation flaw was found in the way the Pidgin MSN protocol plug-in handled MSN notification messages. A malicious server or a remote attacker could use this flaw to crash Pidgin by sending a specially-crafted MSN notification message.

  Tags:  msn pidgin flaw red-hat-security malicious-server input-validation  

• July 09, 2012
• 0:00

  Vuln: Pidgin 'msn_oim_report_to_user()' Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Pidgin 'msn_oim_report_to_user()' Denial of Service Vulnerability

  Tags:  oim msn pidgin service-vulnerability denial-of-service  

• June 28, 2012
• 17:00

  Pidgin MSN Denial of Service Vulnerability

   » ‎ SecuriTeam
  Pidgin is prone to a denial-of-service vulnerability.

  Tags:  msn vulnerability pidgin service-vulnerability denial-of-service  

• June 22, 2012
• 0:00

  Vuln: Pidgin 'msn_oim_report_to_user()' Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Pidgin 'msn_oim_report_to_user()' Denial of Service Vulnerability

  Tags:  oim msn pidgin service-vulnerability denial-of-service  

• 0:00

  Vuln: Pidgin MSN Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Pidgin MSN Denial of Service Vulnerability

  Tags:  msn denial pidgin service-vulnerability denial-of-service  

• May 28, 2012
• 0:00

  Vuln: Pidgin MSN Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Pidgin MSN Denial of Service Vulnerability

  Tags:  msn denial pidgin service-vulnerability denial-of-service  

• March 27, 2012
• 0:00

  Vuln: Pidgin 'msn_oim_report_to_user()' Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Pidgin 'msn_oim_report_to_user()' Denial of Service Vulnerability

  Tags:  oim msn pidgin service-vulnerability denial-of-service  

• May 30, 2011
• 21:00

  [local exploits] - Msn Live Messenger14.0 Plus! DLL Hijacking Exploit (dwmapi.dll)

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  [local exploits] - Msn Live Messenger14.0 Plus! DLL Hijacking Exploit (dwmapi.dll)

  Tags:  dll live msn hijacking exploits  

• 19:02

  MSN Live Messenger 14.0 Plus! DLL Hijack

   » ‎ Packet Storm Security Exploits
  MSN Live Messenger version 14.0 Plus! suffers from a DLL hijacking vulnerability.

  Tags:  messenger msn live messenger-version hijack hijacking  

• 19:02

  MSN Live Messenger 14.0 Plus! DLL Hijack

   » ‎ Packet Storm Security Misc. Files
  MSN Live Messenger version 14.0 Plus! suffers from a DLL hijacking vulnerability.

  Tags:  messenger msn live messenger-version hijack hijacking  

• January 07, 2011
• 0:00

  Vuln: Libpurple MSN Short Packets Remote Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Libpurple MSN Short Packets Remote Denial of Service Vulnerability

  Tags:  libpurple msn short service-vulnerability denial-of-service  

• December 28, 2010
• 0:00

  Vuln: Libpurple MSN Short Packets Remote Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Libpurple MSN Short Packets Remote Denial of Service Vulnerability

  Tags:  libpurple msn short service-vulnerability denial-of-service  

• December 27, 2010
• 0:00

  Vuln: Pidgin MSN Use-After-Free Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Pidgin MSN Use-After-Free Denial of Service Vulnerability

  Tags:  free msn pidgin service-vulnerability denial-of-service  

• November 04, 2010
• 0:00

  Vuln: Libpurple MSN Protocol Custom Emoticons Remote Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Libpurple MSN Protocol Custom Emoticons Remote Denial of Service Vulnerability

  Tags:  protocol libpurple msn msn-protocol service-vulnerability denial-of-service  

• October 21, 2010
• 0:00

  Vuln: Libpurple MSN Protocol Custom Emoticons Remote Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Libpurple MSN Protocol Custom Emoticons Remote Denial of Service Vulnerability

  Tags:  protocol libpurple msn msn-protocol service-vulnerability denial-of-service  

• October 10, 2010
• 14:00

  [local exploits] - MSN Messenger 8.1 DLL Hijacking Exploit (lPK.dll)

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  [local exploits] - MSN Messenger 8.1 DLL Hijacking Exploit (lPK.dll)

  Tags:  messenger msn dll exploits  

• July 29, 2010
• 1:00

  Windows live msn (V 2009 build 14.0.8117.416) ActiveX ADD & delete user

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  Windows live msn (V 2009 build 14.0.8117.416) ActiveX ADD & delete user

  Tags:  activex msn windows  

• May 24, 2010
• 0:00

  Vuln: Libpurple MSN Protocol Custom Emoticons Remote Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Libpurple MSN Protocol Custom Emoticons Remote Denial of Service Vulnerability

  Tags:  protocol libpurple msn msn-protocol service-vulnerability denial-of-service  

• 0:00

  Vuln: Pidgin 'msn_slplink_process_msg()' NULL Pointer Dereference Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Pidgin 'msn_slplink_process_msg()' NULL Pointer Dereference Remote Code Execution Vulnerability

  Tags:  msn slplink process null-pointer code-execution pidgin  

• May 19, 2010
• 0:00

  MDVSA-2010-097.txt

   » ‎ Packet Storm Security Advisories
  Mandriva Linux Security Advisory 2010-097 - The msn_emoticon_msg function in slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.7.0 allows remote attackers to cause a denial of service (application crash) via a custom emoticon in a malformed SLP message. Packages for 2008.0 and 2009.0 are provided due to the Extended Maintenance Program for those products. The updated packages have been patched to correct this issue.

  Tags:  emoticon slp msn msn-protocol msn-emoticon mandriva-linux  

• 0:00

  Vuln: Libpurple MSN Protocol Custom Emoticons Remote Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Libpurple MSN Protocol Custom Emoticons Remote Denial of Service Vulnerability

  Tags:  protocol libpurple msn msn-protocol service-vulnerability denial-of-service  

• May 18, 2010
• 0:00

  Vuln: Libpurple MSN Protocol Custom Emoticons Remote Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Libpurple MSN Protocol Custom Emoticons Remote Denial of Service Vulnerability

  Tags:  protocol libpurple msn msn-protocol service-vulnerability denial-of-service  

• May 06, 2010
• 20:22

  Layer Four Traceroute

   » ‎ Carnal0wnage
  Layer Four Traceroute (lft) http://pwhois.org/lft
  
  If you are using the one bundled with your distro you are probably missing out some of the more interesting and new features.
  
  From the site:
  
  "LFT, short for Layer Four Traceroute, is a sort of 'traceroute' that often works much faster (than the commonly-used Van Jacobson method) and goes through many configurations of packet-filters (firewalls). More importantly, LFT implements numerous other features including AS number lookups through several reliable sources, loose source routing, netblock name lookups, et al. What makes LFT unique? LFT is the all-in-one traceroute tool because it can launch a variety of different probes using ICMP, UDP, and TCP protocols, or the RFC1393 trace method."
  
  Its been useful for me to locate more systems between me and the target host as well as identifying gateways/web firewalls that organization's send all (or some)web traffic through.
  
  It also handy that you can throw it some switches to show the AS and network routes with the scan as well.
  
  Old Traceroute:
  
  cg@meh:~/evil/lft-3.1$ traceroute www.microsoft.com
  traceroute to www.microsoft.com (65.55.21.250), 30 hops max, 60 byte packets
  1 192.168.1.1 (192.168.1.1) 4.681 ms 5.794 ms 14.193 ms
  2-8 Local Stuff
  9 pos-0-0-0-0-pe01.ashburn.va.ibone.comcast.net (68.86.86.26) 35.743 ms 36.391 ms 37.102 ms
  10 as8075-1.ashburn.va.ibone.comcast.net (75.149.230.42) 173.747 ms 174.136 ms 175.054 ms
  11 209.240.199.162 (209.240.199.162) 32.762 ms 33.703 ms 37.096 ms
  12 ge-6-1-0-0.bl2-64c-1a.ntwk.msn.net (207.46.43.5) 17.652 ms 28.151 ms 24.033 ms
  13 ge-0-0-0-0.bl2-64c-1b.ntwk.msn.net (207.46.43.85) 24.864 ms 25.951 ms 26.485 ms
  14 ge-3-1-0-0.co2-64c-1a.ntwk.msn.net (207.46.43.101) 109.384 ms 109.615 ms 110.180 ms
  15 ge-7-0-0-0.co2-64c-1b.ntwk.msn.net (207.46.43.197) 106.607 ms 107.401 ms 110.382 ms
  16 207.46.46.92 (207.46.46.92) 112.458 ms 118.682 ms 106.207 ms
  17 10.22.8.14 (10.22.8.14) 107.323 ms 107.552 ms 107.789 ms
  18 * * *
  19 * * *
  20 * * *
  21 * * *
  22 * * *
  23 * * *
  24 * * *
  25 * * *
  26 * * *
  27 * * *
  28 * * *
  29 * * *
  30 * * *
  
  Layer Four Traceroute
  
  cg@meh:~/evil/lft-3.1$ sudo lft -rNS www.microsoft.com -d 80
  TTL LFT trace to 65.55.21.250:80/tcp
  1 [33657] [CMCS] 192.168.1.1 2.3/1.5ms ** [neglected] no reply packets received from TTLs
  2 through -8 local stuff
  9 [7922] [COMCAST-7922] pos-0-0-0-0-pe01.ashburn.va.ibone.comcast.net (68.86.86.26) 27.2/26.6ms
  10 [8075] [MICROSOFT-CORP---MSN-AS-BLOCK] as8075-1.ashburn.va.ibone.comcast.net (75.149.230.42) 25.9/24.3ms
  11 [8075] [MICROSOFT-CORP---MSN-AS-BLOCK] 209.240.199.162 15.8/24.3ms
  12 [8075] [MICROSOFT-CORP---MSN-AS-BLOCK] ge-6-1-0-0.bl2-64c-1a.ntwk.msn.net (207.46.43.5) 34.1/14.8ms
  13 [8075] [MICROSOFT-CORP---MSN-AS-BLOCK] ge-0-0-0-0.bl2-64c-1b.ntwk.msn.net (207.46.43.85) 16.0/15.9ms
  14 [8075] [MICROSOFT-CORP---MSN-AS-BLOCK] ge-3-1-0-0.co2-64c-1a.ntwk.msn.net (207.46.43.101) 121.3/98.2ms
  15 [8075] [MICROSOFT-CORP---MSN-AS-BLOCK] ge-7-0-0-0.co2-64c-1b.ntwk.msn.net (207.46.43.197) 114.1/97.3ms
  16 [6067] [ONYX] 207.46.46.92 101.6/99.9ms
  17 [8075] [MICROSOFT-CORP---MSN-AS-BLOCK] 10.22.8.14 99.5/109.5ms
  18 [AS?] [Net?] [target open] 65.55.21.250:80 98.5/109.4ms

  Tags:  traceroute ntwk msn van-jacobson target-host byte-packets Pentesting  

• April 28, 2010
• 13:58

  MDVSA-2010-085.txt

   » ‎ Packet Storm Security Recent Files
  Mandriva Linux Security Advisory 2010-085 - The OSCAR protocol plugin in libpurple in Pidgin before 2.6.3 and Adium before 1.3.7 allows remote attackers to cause a denial of service (application crash) via crafted contact-list data for ICQ and possibly AIM, as demonstrated by the SIM IM client. Directory traversal vulnerability in slp.c in the MSN protocol plugin in libpurple in Pidgin 2.6.4 and Adium 1.3.8 allows remote attackers to read arbitrary files via a .. (dot dot) in an application/x-msnmsgrp2p MSN emoticon (aka custom smiley) request, a related issue to CVE-2004-0122. Directory traversal vulnerability in slp.c in the MSN protocol plugin in libpurple in Pidgin 2.6.4 and Adium 1.3.8 allows remote attackers to read arbitrary files via a .. (dot dot) in an application/x-msnmsgrp2p MSN emoticon (aka custom smiley) request, a related issue to CVE-2004-0122. Other issues have also been identified.

  Tags:  plugin msn protocol oscar sim-im directory-traversal-vulnerability msn-protocol mandriva-linux  

• 13:58

  MDVSA-2010-085.txt

   » ‎ Packet Storm Security Advisories
  Mandriva Linux Security Advisory 2010-085 - The OSCAR protocol plugin in libpurple in Pidgin before 2.6.3 and Adium before 1.3.7 allows remote attackers to cause a denial of service (application crash) via crafted contact-list data for ICQ and possibly AIM, as demonstrated by the SIM IM client. Directory traversal vulnerability in slp.c in the MSN protocol plugin in libpurple in Pidgin 2.6.4 and Adium 1.3.8 allows remote attackers to read arbitrary files via a .. (dot dot) in an application/x-msnmsgrp2p MSN emoticon (aka custom smiley) request, a related issue to CVE-2004-0122. Directory traversal vulnerability in slp.c in the MSN protocol plugin in libpurple in Pidgin 2.6.4 and Adium 1.3.8 allows remote attackers to read arbitrary files via a .. (dot dot) in an application/x-msnmsgrp2p MSN emoticon (aka custom smiley) request, a related issue to CVE-2004-0122. Other issues have also been identified.

  Tags:  plugin msn protocol oscar sim-im directory-traversal-vulnerability msn-protocol mandriva-linux  

• April 02, 2010
• 11:52

  Hijack msn (receive & reply)

   » ‎ remote-exploit & backtrack
  Hey!
  I have tried search on google for this one but don't know what to search for.
  This is a GUI on *unix that will, in a mitm attack, redirect victimB msn conversation to you and you could chat with him without him notice anything.
  
  Is this something anyone recognize?
  Best regards TF!
  
  Edit; I have set up a network, 3 computers with wlan access. 2 computers (victimA & victimB) are chatting using Msn messenger.
  The third computer (thief) will the doing an mitm attack and make victimB's conversation redirect to thief and he then continue the chat without no one notice anything excepts victimA how never get any answer.
  
  Also forgot to say that if there chatting using each others webcam you cold see it as a streaming movie.
  //sorry for bad english.

  Tags:  mitm msn victimb computer-thief google access-2 Newbie Area  

• March 07, 2010
• 7:00

  msn.pm question

   » ‎ darkc0de
  msn.pm question

  Tags:  question msn  

• February 22, 2010
• 14:00

  Apatch.org ( Msn Messenger Patch!) SQLi

   » ‎ darkc0de
  Apatch.org ( Msn Messenger Patch!) SQLi

  Tags:  messenger apatch msn msn-messenger-patch  

• 9:01

  Darkc0de Msn freezer

   » ‎ darkc0de
  Darkc0de Msn freezer

  Tags:  darkc freezer msn  

• 7:00

  darkc0de msn frozer 1.0

   » ‎ darkc0de
  darkc0de msn frozer 1.0

  Tags:  frozer msn darkc  

• January 20, 2010
• 10:03

  pidgin_exploit.py.txt

   » ‎ Packet Storm Security Recent Files
  Pidgin MSN versions 2.6.4 and below file download proof of concept exploit.

  Tags:  txt msn pidgin proof-of-concept  

• 10:03

  pidgin_exploit.py.txt

   » ‎ Packet Storm Security Exploits
  Pidgin MSN versions 2.6.4 and below file download proof of concept exploit.

  Tags:  txt msn pidgin proof-of-concept  

• 10:02

  Pidgin MSN

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  Pidgin MSN

  Tags:  msn pidgin