34 matches found
Mac OS X 10.8 < 10.8.3 Multiple Vulnerabilities (Security Update 2013-001)
Binary data 801018.prm...
Debian Security Advisory DSA 2250-1 (citadel)
The remote host is missing an update to citadel announced via advisory DSA 2250-1. OpenVAS Vulnerability Test $Id: deb22501.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2250-1 citadel Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...
Citadel Jabber server / Jabberd / ejabberd DoS
DoS on XML data parsing...
[SECURITY] [DSA 2250-1] citadel security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2250-1 [email protected] http://www.debian.org/security/ Nico Golde March 31, 2011 http://www.debian.org/security/faq -...
DSA-2250-1 citadel - denial of service
Bulletin has no description...
Jive Software Openfire Jabber Server SQL Injection (CVE-2008-6509)
Openfire previously known as Wildfire Server is an open source Jabber/XMPP server written in Java. Jabber is an open instant messaging technology that is maintained by the community. Extensible Messaging and Presence Protocol XMPP is an open, XML-inspired protocol originally aimed at...
CVE-2009-3026
protocols/jabber/auth.c in libpurple in Pidgin 2.6.0, and possibly other versions, does not follow the "require TLS/SSL" preference when connecting to older Jabber servers that do not follow the XMPP specification, which causes libpurple to connect to the server without the expected encryption an...
FreeBSD : openfire -- multiple vulnerabilities (937adf01-b64a-11dd-a55e-00163e000016)
Andreas Kurtz reports : The jabber server Openfire = version 3.6.0a contains several serious vulnerabilities. Depending on the particular runtime environment these issues can potentially even be used by an attacker to execute code on operating system level. - Authentication bypass - This...
OpenFire jabber server multiple security vulnerabilities
Authentication bypass, SQL injection, crossite scripting...
OpenFire jabber server DoS
Memory exhaustion if client fails to receive messages...
MDKA-2006:047 : jabber
The OpenSSL library was not properly initialized in the jabber SSL support code, which prevented SSL support for incoming client connections on the jabber server. This update corrects this issue. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not...
CVE-2004-0953
Buffer overflow in the C2S module in the open source Jabber 2.x server Jabberd allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long username...
CVE-2004-0953
Buffer overflow in the C2S module in the open source Jabber 2.x server Jabberd allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long username...