CVE-2015-2058

c2s/c2s.c in Jabber Open Source Server 2.3.2 and earlier truncates data without ensuring it remains valid UTF-8, which allows remote authenticated users to read system memory or possibly have other unspecified impact via a crafted JID...

CVE-2015-2058: Exposure of Sensitive Information to an Unauthorized Actor

c2s/c2s.c in Jabber Open Source Server 2.3.2 and earlier truncates data without ensuring it remains valid UTF-8, which allows remote authenticated users to read system memory or possibly have other unspecified impact via a crafted JID...

ejabberd XMPP/Jabber server DoS

Array overflows on large number of simulationeus c2s messages...

CVE-2010-0305

ejabberdc2s.erl in ejabberd before 2.1.3 allows remote attackers to cause a denial of service daemon crash via a large number of c2s aka client2server messages that trigger a queue overload...

CVE-2010-0305

ejabberdc2s.erl in ejabberd before 2.1.3 allows remote attackers to cause a denial of service daemon crash via a large number of c2s aka client2server messages that trigger a queue overload...

CVE-2010-0305

ejabberdc2s.erl in ejabberd before 2.1.3 allows remote attackers to cause a denial of service daemon crash via a large number of c2s aka client2server messages that trigger a queue overload...

CVE-2006-1329: Undefined Security Weakness

The SASL negotiation in Jabber Studio jabberd before 2.0s11 allows remote attackers to cause a denial of service "c2s segfault" by sending a "response stanza before an auth stanza"...

CVE-2004-0953: Undefined Security Weakness

Buffer overflow in the C2S module in the open source Jabber 2.x server Jabberd allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long username...