Chali Ahmul M.P.U | 16 Jan 02:34
Picon

jabber & resources

Hello,

I concerning about the jabber these days. But I was disappointed that 
centericq can't handle multiple resources well. First I tried to repair the 
versioninfo request, but then I realised that I can get a remote resource 
name. I going to repair this, but I would like to know first if there is some 
structure prepaired for this reason which would be more logicall for use. 
Specifically: to implement multiple resources and their status.

thanks

Chali Ahmul M.P.U

_______________________________________________
Cicq mailing list
Cicq@...
http://mailman.linuxpl.org/mailman/listinfo/cicq
Questions? Check the FAQ first: http://centericq.de/faq/

dubrowin.36210450 | 16 Jan 14:39
Favicon

CenterICQ IJHook.CC Remote Buffer Overflow Vulnerability

I saw this security report on the Security Focus Vulnerability mailing list.

http://www.securityfocus.com/bid/21932

I was hoping to find a new version
with a fix, or at least some discussion on this topic.  Is there an effort
I haven't seen yet that is working on a fix for this issue?

  Shlomo
_______________________________________________
Cicq mailing list
Cicq@...
http://mailman.linuxpl.org/mailman/listinfo/cicq
Questions? Check the FAQ first: http://centericq.de/faq/

Julien Lemoine | 16 Jan 15:45
Picon
Favicon

Re: CenterICQ IJHook.CC Remote Buffer Overflow Vulnerability

Hello,

Debian package includes a fix for this buffer overflow (available on 
version >= 4.21.0-17).

Patch is available here :
http://www2.speedblue.org/download/security_TK53_livejournal.dpatch

There is also a potential segmentation fault in jabber module fixed in 
centericq >= 4.21.0-18.

Patch is available here :
http://www2.speedblue.org/download/potentialsegv_strstr.dpatch

Best Regards.
Julien Lemoine

* dubrowin.36210450@...
<dubrowin.36210450@...> [2007-01-16 13:39:57 -0000]:

> I saw this security report on the Security Focus Vulnerability mailing list.
> 
> 
> http://www.securityfocus.com/bid/21932
> 
> I was hoping to find a new version
> with a fix, or at least some discussion on this topic.  Is there an effort
> I haven't seen yet that is working on a fix for this issue?
> 
>   Shlomo
(Continue reading)

Mike Jankowski | 23 Jan 01:31
Picon

Re: Question for config

* Alexey Medvedev <malx@...> [2006-10-26 17:33]:
> On Wed, 25 Oct 2006, Mike Jankowski wrote:
> 
> > I've got the problem, that everyone knows my IP, intern and extern....
> > How can I configure centericq, that there is no publication of my ip's?
> 
> 	Is it possible at all with ICQ ?
>  Use jabber with icq-gate :) it will not show your IP then :)

Well, that's true.... Now I'm still use jabber ;) But there have to be a
way with centericq, isn't it? In source there is way fix it, or? What I
have to change in the source, that centericq don't send/show my using
IP?

Regards
Mike J.

--

-- 
Mike Jankowski
mike_jan@...
irc.freenode.net
#kanotix, #debian.de
_______________________________________________
Cicq mailing list
Cicq@...
http://mailman.linuxpl.org/mailman/listinfo/cicq
Questions? Check the FAQ first: http://centericq.de/faq/


Gmane