CVE-2017-10807: Improper Authentication

JabberD 2.x aka jabberd2 before 2.6.1 allows anyone to authenticate using SASL ANONYMOUS, even when the sasl.anonymous c2s.xml option is not enabled...

jabberd -- authentication bypass vulnerability

SecurityFocus reports: JabberD is prone to an authentication-bypass vulnerability. An attacker can exploit this issue to bypass the authentication mechanism and perform unauthorized actions. This may lead to further attacks...

Fedora 23 : jabberd-2.3.3-7.fc23 (2016-ba6fd98830)

fixes 'Dialback secrets are generated using a non-cryptographically secure PRNG' Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

jabberd information disclosure vulnerability

jabberd is a live chat server based on XMMP an open XML-based real-time communication protocol. An information disclosure vulnerability exists in jabberd. An attacker can exploit this vulnerability to obtain sensitive information...

Cisco Unified Presence XMPP Denial of Service Vulnerability

The XML parser of Cisco Unified Presence contains a vulnerability that could allow an authenticated, remote attacker to trigger a crash of the jabberd process, causing a denial of service condition. The vulnerability is due to insufficient validation of crafted XML in Extensible Messaging and...

CVE-2013-1197: Improper Input Validation

The XML parser in the server in Cisco Unified Presence CUP allows remote authenticated users to cause a denial of service jabberd daemon crash via crafted XML content in an XMPP message, aka Bug ID CSCue13912...

RHEL 5 : jabberd (RHSA-2011:0881)

An updated jabberd package that fixes one security issue is now available for Red Hat Network Proxy 5.4.1 for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...

RHEL 5 : jabberd (RHSA-2011:0882)

An updated jabberd package that fixes one security issue is now available for Red Hat Network Satellite 5.4.1 for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives ...

RHEL 3 / 4 : Proxy Server (RHSA-2008:0523)

Red Hat Network Proxy Server version 4.2.3 is now available. This update includes fixes for a number of security issues in Red Hat Network Proxy Server components. This update has been rated as having low security impact by the Red Hat Security Response Team. The Red Hat Network Proxy Server 4.2....

RHEL 6 : Red Hat Network Proxy server jabberd (RHSA-2012:1539)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2012:1539 advisory. This package provides jabberd 2, an Extensible Messaging and Presence Protocol XMPP server used for XML based communication. It was discovered that t...

RHEL 6 : Red Hat Network Satellite server jabberd (RHSA-2012:1538)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2012:1538 advisory. This package provides jabberd 2, an Extensible Messaging and Presence Protocol XMPP server used for XML based communication. It was discovered that t...

Low: Red Hat Security Advisory: Red Hat Network Proxy server jabberd security update

An updated jabberd package that fixes one security issue is now available for Red Hat Network Proxy 5.5 for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives ...

jabberd: Prone to unsolicited XMPP Dialback attacks

s2s/out.c in jabberd2 2.2.16 and earlier does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via a 1 Verify Response or 2 Authorization Response...

jabberd: Prone to unsolicited XMPP Dialback attacks

s2s/out.c in jabberd2 2.2.16 and earlier does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via a 1 Verify Response or 2 Authorization Response...

Low: Red Hat Security Advisory: Red Hat Network Satellite server jabberd security update

An updated jabberd package that fixes one security issue is now available for Red Hat Network Satellite 5.5 for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which...

Fedora 18 : jabberd-2.2.17-1.fc18 (2012-12418)

included patch for 'Vulnerability in XMPP Server Dialback Implementations' http://xmpp.org/resources/security-notices/server-dialback/ fix for systemd scripts Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

[SECURITY] Fedora 18 Update: jabberd-2.2.17-1.fc18

The jabberd project aims to provide an open-source server implementation of the Jabber protocols for instant messaging and XML routing. The goal of this project is to provide a scalable, reliable, efficient and extensible server that provides a complete set of features and is up to date with the...

Fedora Update for jabberd FEDORA-2012-12481

Check for the Version of jabberd OpenVAS Vulnerability Test Fedora Update for jabberd FEDORA-2012-12481 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora 17 : jabberd-2.2.14-4.fc17 (2012-12487)

included patch for 'Vulnerability in XMPP Server Dialback Implementations' http://xmpp.org/resources/security-notices/server-dialback/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automaticall...

Fedora Update for jabberd FEDORA-2012-12487

Check for the Version of jabberd OpenVAS Vulnerability Test Fedora Update for jabberd FEDORA-2012-12487 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...