Lucene search

K
freebsdFreeBSDF4AF098D-D921-11DA-AD4A-00123FFE8333
HistoryMar 20, 2006 - 12:00 a.m.

jabberd -- SASL Negotiation Denial of Service Vulnerability

2006-03-2000:00:00
vuxml.freebsd.org
12

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.066 Low

EPSS

Percentile

93.8%

Secunia reports:

A vulnerability has been reported in jabberd, which can be
exploited by malicious people to cause a DoS (Denial of
Service).
The vulnerability is caused due to an error within the handling
of SASL negotiation. This can be exploited to cause a crash by
sending a “response” stanza before an “auth” stanza.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchjabberd< 2.0.11UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.066 Low

EPSS

Percentile

93.8%

Related for F4AF098D-D921-11DA-AD4A-00123FFE8333