EUVD-2012-3879

Malware in sbrugna...

CVE-2013-1187: Improper Input Validation

The Connection Manager in Cisco Jabber Extensible Communications Platform aka Jabber XCP does not properly validate login data, which allows remote attackers to cause a denial of service service crash by sending a series of malformed login packets, aka Bug ID CSCts76762...

CVE-2012-3935

Cisco Unified Presence CUP before 8.63 and Jabber Extensible Communications Platform aka Jabber XCP before 5.3 allow remote attackers to cause a denial of service process crash via a crafted XMPP stream header, aka Bug ID CSCtu32832...

CVE-2012-3935: Improper Restriction of Operations within the Bounds of a Memory Buffer

Cisco Unified Presence CUP before 8.63 and Jabber Extensible Communications Platform aka Jabber XCP before 5.3 allow remote attackers to cause a denial of service process crash via a crafted XMPP stream header, aka Bug ID CSCtu32832...

CVE-2011-3287: Undefined Security Weakness

Cisco Jabber Extensible Communications Platform aka Jabber XCP 2.x through 5.4.x before 5.4.0.27581 and 5.8.x before 5.8.1.27561 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service memory and CPU consumption, and process crash via...

Cisco Security Advisory: Jabber Extensible Communications Platform and Cisco Unified Presence XML Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Jabber Extensible Communications Platform and Cisco Unified Presence XML Denial of Service Vulnerability Advisory ID: cisco-sa-20110928-xcpcupsxml Revision 1.0 For Public Release 2011 September 28 1600 UTC GMT...