A directory traversal exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent from the server could potentially result in an overwrite of files. A malicious server or someone with access to the network traffic can provide an invalid filename for a splash image triggering the vulnerability.
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
| Link | Tags |
|---|---|
| http://www.securityfocus.com/bid/91335 | vdb entry |
| http://www.pidgin.im/news/security/?id=97 | patch vendor advisory |
| http://www.debian.org/security/2016/dsa-3620 | third party advisory vendor advisory |
| http://www.talosintelligence.com/reports/TALOS-2016-0128/ | third party advisory exploit |
| https://security.gentoo.org/glsa/201701-38 | vendor advisory |
| http://www.ubuntu.com/usn/USN-3031-1 | third party advisory vendor advisory |