265 matches found
Debian Security Advisory DSA 2250-1 (citadel)
The remote host is missing an update to citadel announced via advisory DSA 2250-1. OpenVAS Vulnerability Test $Id: deb22501.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2250-1 citadel Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...
Debian: Security Advisory (DSA-2250-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2011-1756
modules/xmpp/servxmpp.c in Citadel 7.86 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service memory and CPU consumption via a crafted XML document containing a large number of nested entity references, a similar issue t...
CVE-2011-1756
modules/xmpp/servxmpp.c in Citadel 7.86 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service memory and CPU consumption via a crafted XML document containing a large number of nested entity references, a similar issue t...
Design/Logic Flaw
modules/xmpp/servxmpp.c in Citadel 7.86 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service memory and CPU consumption via a crafted XML document containing a large number of nested entity references, a similar issue t...
UBUNTU-CVE-2011-1756
modules/xmpp/servxmpp.c in Citadel 7.86 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service memory and CPU consumption via a crafted XML document containing a large number of nested entity references, a similar issue t...
CVE-2011-1756
Removed by vendor...
CVE-2011-1756
Technical details for CVE-2011-1756 are not publicly available in the provided documents. Monitor for updates.
CVE-2011-1756
modules/xmpp/servxmpp.c in Citadel 7.86 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service memory and CPU consumption via a crafted XML document containing a large number of nested entity references, a similar issue t...
Debian DSA-2250-1 : citadel - denial of service
Wouter Coekaerts discovered that the Jabber server component of Citadel, a complete and feature-rich groupware server, is vulnerable to the so-called'billion laughs' attack because it does not prevent entity expansion on received data. This allows an attacker to perform denial of service attacks...
Citadel Jabber server / Jabberd / ejabberd DoS
DoS on XML data parsing...
[SECURITY] [DSA 2250-1] citadel security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2250-1 [email protected] http://www.debian.org/security/ Nico Golde March 31, 2011 http://www.debian.org/security/faq -...
[SECURITY] [DSA 2250-1] citadel security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2250-1 [email protected] http://www.debian.org/security/ Nico Golde March 31, 2011 http://www.debian.org/security/faq -...
DSA-2250-1 citadel - denial of service
Bulletin has no description...
[SECURITY] [DSA 1752-1] New webcit packages fix potential remote code execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1752-1 [email protected] http://www.debian.org/security/ Florian Weimer March 23, 2009 http://www.debian.org/security/faq -...
Debian DSA-1752-1 : webcit - format string vulnerability
Wilfried Goesgens discovered that WebCit, the web-based user interface for the Citadel groupware system, contains a format string vulnerability in the minicalendar component, possibly allowing arbitrary code execution CVE-2009-0364 . %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
DSA-1752-1 webcit - potential remote code execution
Bulletin has no description...
CVE-2008-3930
migratealiases.sh in Citadel Server 7.37 allows local users to overwrite arbitrary files via a symlink attack on a temporary file...