1038 matches found
CVE-2011-3287
Cisco Jabber Extensible Communications Platform aka Jabber XCP 2.x through 5.4.x before 5.4.0.27581 and 5.8.x before 5.8.1.27561 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service memory and CPU consumption, and process crash via...
PT-2011-4370
Name of the Vulnerable Software and Affected Versions Cisco Jabber Extensible Communications Platform aka Jabber XCP versions 2.x through 5.4.x before 5.4.0.27581 Cisco Jabber Extensible Communications Platform aka Jabber XCP versions 5.8.x before 5.8.1.27561 Description The issue is related to...
CVE-2011-3287: Undefined Security Weakness
Cisco Jabber Extensible Communications Platform aka Jabber XCP 2.x through 5.4.x before 5.4.0.27581 and 5.8.x before 5.8.1.27561 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service memory and CPU consumption, and process crash via...
Cisco Security Advisory: Jabber Extensible Communications Platform and Cisco Unified Presence XML Denial of Service Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Jabber Extensible Communications Platform and Cisco Unified Presence XML Denial of Service Vulnerability Advisory ID: cisco-sa-20110928-xcpcupsxml Revision 1.0 For Public Release 2011 September 28 1600 UTC GMT...
Cisco Jabber Extensible Communications Platform / Cisco Unified Presence
Resources exhaustion on XML parsing...
Jabber Extensible Communications Platform and Cisco Unified Presence XML Denial of Service Vulnerability
A denial of service DoS vulnerability exists in Jabber Extensible Communications Platform Jabber XCP and Cisco Unified Presence. An unauthenticated, remote attacker could exploit this vulnerability by sending malicious XML to an affected server. Successful exploitation of this vulnerability could...
Debian Security Advisory DSA 2250-1 (citadel)
The remote host is missing an update to citadel announced via advisory DSA 2250-1. OpenVAS Vulnerability Test $Id: deb22501.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2250-1 citadel Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...
VVMessenger v1.0.4170x.x - Denial of Service Vulnerabilities
Document Title: =============== VVMessenger v1.0.4170x.x - Denial of Service Vulnerabilities Release Date: ============= 2011-08-03 Vulnerability Laboratory ID VL-ID: ==================================== 120 Product & Service Introduction: =============================== V&V messenger is an insta...
VVMessenger v1.0.4170x.x - Denial of Service Vulnerabilities
Document Title: =============== VVMessenger v1.0.4170x.x - Denial of Service Vulnerabilities Release Date: ============= 2011-08-03 Vulnerability Laboratory ID VL-ID: ==================================== 120 Product & Service Introduction: =============================== V&V messenger is an insta...
xmpp-brute NSE Script
Performs brute force password auditing against XMPP Jabber instant messaging servers. Script Arguments xmpp-brute.servername needed when host name cannot be automatically determined eg. when running against an IP, instead of hostname xmpp-brute.auth authentication mechanism to use LOGIN, PLAIN,...
Fedora Update for ejabberd FEDORA-2011-8415
Check for the Version of ejabberd OpenVAS Vulnerability Test Fedora Update for ejabberd FEDORA-2011-8415 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Fedora Update for ejabberd FEDORA-2011-8437
Check for the Version of ejabberd OpenVAS Vulnerability Test Fedora Update for ejabberd FEDORA-2011-8437 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
[SECURITY] Fedora 13 Update: jabberd-2.2.11-4.fc13
The jabberd project aims to provide an open-source server implementation of the Jabber protocols for instant messaging and XML routing. The goal of this project is to provide a scalable, reliable, efficient and extensible server that provides a complete set of features and is up to date with the...
[SECURITY] Fedora 15 Update: jabberd-2.2.14-1.fc15
The jabberd project aims to provide an open-source server implementation of the Jabber protocols for instant messaging and XML routing. The goal of this project is to provide a scalable, reliable, efficient and extensible server that provides a complete set of features and is up to date with the...
Debian DSA-2248-1 : ejabberd - denial of service
Wouter Coekaerts discovered that ejabberd, a distributed XMPP/Jabber server written in Erlang, is vulnerable to the so-called 'billion laughs' attack because it does not prevent entity expansion on received data. This allows an attacker to perform denial of service attacks against the service by...
[SECURITY] [DSA 2250-1] citadel security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2250-1 [email protected] http://www.debian.org/security/ Nico Golde March 31, 2011 http://www.debian.org/security/faq -...
Citadel Jabber server / Jabberd / ejabberd DoS
DoS on XML data parsing...
[SECURITY] [DSA 2249-1] jabberd14 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2249-1 [email protected] http://www.debian.org/security/ Nico Golde March 31, 2011 http://www.debian.org/security/faq -...
