Debian: Security Advisory (DSA-2250-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 2250-1 (citadel)

The remote host is missing an update to citadel announced via advisory DSA 2250-1. OpenVAS Vulnerability Test $Id: deb22501.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2250-1 citadel Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Debian DSA-2250-1 : citadel - denial of service

Wouter Coekaerts discovered that the Jabber server component of Citadel, a complete and feature-rich groupware server, is vulnerable to the so-called'billion laughs' attack because it does not prevent entity expansion on received data. This allows an attacker to perform denial of service attacks...