[email protected]CVE-2004-2391

HistoryDec 31, 2004 - 5:00 a.m.

CVE-2004-2391

2004-12-3105:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2004-2391

jabber

gadu-gadu transport

denial of service

7.5 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.011 Low

EPSS

Percentile

84.0%

JSON

Jabber Gadu-Gadu Transport (a.k.a. jabber-gg-transport) 2.0.x before 2.0.8 allows remote attackers to cause a denial of service a message with an empty <priority/> tag.

CPENameOperatorVersion
jabberstudio:jabber_gadu-gadu_transportjabberstudio jabber gadu-gadu transporteq2.0
jabberstudio:jabber_gadu-gadu_transportjabberstudio jabber gadu-gadu transporteq2.0.3
jabberstudio:jabber_gadu-gadu_transportjabberstudio jabber gadu-gadu transporteq2.0.5
jabberstudio:jabber_gadu-gadu_transportjabberstudio jabber gadu-gadu transporteq2.0.6
jabberstudio:jabber_gadu-gadu_transportjabberstudio jabber gadu-gadu transporteq2.0.4
jabberstudio:jabber_gadu-gadu_transportjabberstudio jabber gadu-gadu transporteq2.0.2
jabberstudio:jabber_gadu-gadu_transportjabberstudio jabber gadu-gadu transporteq2.0.1
jabberstudio:jabber_gadu-gadu_transportjabberstudio jabber gadu-gadu transporteq2.0.7

CPE	Name	Operator	Version
jabberstudio:jabber_gadu-gadu_transport	jabberstudio jabber gadu-gadu transport	eq	2.0
jabberstudio:jabber_gadu-gadu_transport	jabberstudio jabber gadu-gadu transport	eq	2.0.3
jabberstudio:jabber_gadu-gadu_transport	jabberstudio jabber gadu-gadu transport	eq	2.0.5
jabberstudio:jabber_gadu-gadu_transport	jabberstudio jabber gadu-gadu transport	eq	2.0.6
jabberstudio:jabber_gadu-gadu_transport	jabberstudio jabber gadu-gadu transport	eq	2.0.4
jabberstudio:jabber_gadu-gadu_transport	jabberstudio jabber gadu-gadu transport	eq	2.0.2
jabberstudio:jabber_gadu-gadu_transport	jabberstudio jabber gadu-gadu transport	eq	2.0.1
jabberstudio:jabber_gadu-gadu_transport	jabberstudio jabber gadu-gadu transport	eq	2.0.7

References

secunia.com/advisories/10974/

www.jabberstudio.org/projects/jabber-gg-transport/releases/view.php?id=429

www.securityfocus.com/bid/9710

exchange.xforce.ibmcloud.com/vulnerabilities/15319

7.5 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.011 Low

EPSS

Percentile

84.0%

JSON