Lucene search
PRIOn knowledge basePRION:CVE-2017-5591HistoryFeb 09, 2017 - 8:59 p.m.
Design/Logic Flaw
2017-02-0920:59:00
PRIOn knowledge base
www.prio-n.com
7
An incorrect implementation of “XEP-0280: Message Carbons” in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application’s display. This allows for various kinds of social engineering attacks. This CVE is for SleekXMPP up to 1.3.1 and Slixmpp all versions up to 1.2.3, as bundled in poezio (0.8 - 0.10) and other products.
Related
nessus
nessus
Fedora 24 : python-sleekxmpp (2017-97e65f13bb)
2017-04-13 00:00:00
Fedora 25 : python-sleekxmpp (2017-99ad80f109)
2017-04-13 00:00:00
Fedora 26 : python-sleekxmpp (2017-68bd2a916e)
2017-07-17 00:00:00
ubuntucve
ubuntucve
CVE-2017-5591
2017-02-09 00:00:00
nvd
nvd
CVE-2017-5591
2017-02-09 20:59:00
zdt
zdt
XMPP Clients User Impersonation Vulnerability
2017-02-10 00:00:00
veracode
veracode
Social Engineering Attack Via Impersonation
2017-02-10 01:55:19
openvas
openvas
Fedora Update for python-sleekxmpp FEDORA-2017-99ad80f109
2017-04-13 00:00:00
Fedora Update for python-sleekxmpp FEDORA-2017-97e65f13bb
2017-04-13 00:00:00
fedora
fedora
[SECURITY] Fedora 25 Update: python-sleekxmpp-1.3.2-1.fc25
2017-04-12 20:24:15
[SECURITY] Fedora 26 Update: python-sleekxmpp-1.3.2-1.fc26
2017-04-12 14:54:58
[SECURITY] Fedora 24 Update: python-sleekxmpp-1.3.2-1.fc24
2017-04-12 19:50:48
cvelist
cvelist
CVE-2017-5591
2017-02-09 20:00:00
debiancve
debiancve
CVE-2017-5591
2017-02-09 20:59:00
github
github
SleekXMPP and Slixmpp Incorrect Implementation of Message Carbons
2022-05-13 01:28:46
cve
cve
CVE-2017-5591
2017-02-09 20:59:00
osv
osv
PYSEC-2017-104
2017-02-09 20:59:00
SleekXMPP and Slixmpp Incorrect Implementation of Message Carbons
2022-05-13 01:28:46
PYSEC-2017-103
2017-02-09 20:59:00