CVE-2010-0013: Path Traversal
Directory traversal vulnerability in slp.c in the MSN protocol plugin in libpurple in Pidgin 2.6.4 and Adium 1.3.8 allows remote attackers to read arbitrary files via a .. (dot dot) in an application/x-msnmsgrp2p MSN emoticon (aka custom smiley) request, a related issue to CVE-2004-0122. NOTE: it could be argued that this is resultant from a vulnerability in which an emoticon download request is processed even without a preceding text/x-mms-emoticon message that announced availability of the emoticon.
Other sources
On 26C3, Fabian Yamaguchi presented a directory traversal flaw in libpurple MSN protocol implementation. The flaw can be used by the remote attacker to download arbitrary file readable by the user running instant messenger using libpurple (such as pidgin) from the victim's computer via MSN emoticon / smiley download request. More details in Fabian's presentation:
http://events.ccc.de/congress/2009/Fahrplan/events/3596.en.html http://events.ccc.de/congress/2009/Fahrplan/attachments/148326c3ipv4fuckups.pdf (slides 10-22)
Upstream fix: http://d.pidgin.im/viewmtn/revision/info/c64a1adc8bda2b4aeaae1f273541afbc4f71b810
which depends on the other two commits: http://d.pidgin.im/viewmtn/revision/info/4be2df4f72bd8a55cdae7f2554b73342a497c92f http://d.pidgin.im/viewmtn/revision/info/3d02401cf232459fc80c0837d31e05fae7ae5467
References: http://thread.gmane.org/gmane.comp.security.oss.general/2462
Mitigations: Remove ~/.purple/customsmiley/ directory if it exists. The directory is not created by default and is created when first custom smiley is defined.
— Red Hat
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-0013?
CVE-2010-0013 is classified as a moderate severity vulnerability due to its potential to allow remote attackers to read arbitrary files.
How do I fix CVE-2010-0013?
To fix CVE-2010-0013, upgrade Pidgin to version 2.6.5 or later on affected systems.
Which software versions are affected by CVE-2010-0013?
CVE-2010-0013 affects Pidgin version 2.6.4 and Adium version 1.3.8, among other specific versions of various distributions.
Can CVE-2010-0013 be exploited remotely?
Yes, CVE-2010-0013 can be exploited remotely via maliciously crafted MSN emoticon requests.
What is the nature of the vulnerability in CVE-2010-0013?
CVE-2010-0013 is a directory traversal vulnerability that allows attackers to access files outside the intended directories.