Info

Disclosure

Jan 16, 2007

Discovery

Unknown

Dates

Exploit

Jan 16, 2007

Solution

Unknown

Description

A remote format string flaw exists in Colloquy. It fails to validate INVITE requests resulting in a format string vulnerability. With a specially crafted request, an attacker can cause arbitrary code execution resulting in a loss of integrity.

Classification

Location: Remote / Network Access, Local / Remote, Context Dependent
Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Public
Disclosure: OSVDB Verified, Vendor Verified

Solution

Upgrade to version 2.1 (2007-01-17) or higher, as it has been reported to fix this vulnerability. Note that this flaw was fixed in the 2007-01-17 release without a change in version number. An upgrade is required as there are no known workarounds.

Products

Javelin.cc

Colloquy

2.1

References

CVE ID: 2007-0344 (see also: NVD)
Bugtraq ID: 22086
Secunia Advisory ID: 23801
Exploit Database: 3139
Milw0rm: 3139
VUPEN Advisory: ADV-2007-0238
Vendor URL: http://colloquy.info/
Vendor Specific News/Changelog Entry: http://colloquy.info/project/changeset/3558
Other Advisory URL: http://projects.info-pull.com/moab/MOAB-16-01-2007.html

Credit

LMH - lmhinfo-pull.com -
Kevin Finisterre - kfdigitalmunition.com -

Direct URL: http://osvdb.org/32688