This host has Pidgin installed and is prone to multiple vulnerabilities.

Successful exploitation will let the attacker obtain sensitive information by sniffing XMPP sessions and cause application crash. Impact Level: Application

Upgrade to Pidgin version 2.6.1 http://pidgin.im/download

- The application connects to Jabberd servers that are not fully compliant with the XMPP specifications without encryption, even if the 'Require SSL/TLS' setting is configured. - An error ocurrs in compililg libpurple while processing malicious links received via the Yahoo Messenger protocol.

Pidgin version 2.6.0 on Linux

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=542891
• http://pidgin.im/news/security/?id=35
• http://secunia.com/advisories/36384/
• http://www.openwall.com/lists/oss-security/2009/08/19/2

---

Updated on 2015-03-25