EUVD-2012-3879

Malware in sbrugna...

CVE-2013-1187: Improper Input Validation

The Connection Manager in Cisco Jabber Extensible Communications Platform aka Jabber XCP does not properly validate login data, which allows remote attackers to cause a denial of service service crash by sending a series of malformed login packets, aka Bug ID CSCts76762...

PT-2013-2955

Name of the Vulnerable Software and Affected Versions Cisco Jabber Extensible Communications Platform affected versions not specified Description The issue concerns the Connection Manager in Cisco Jabber Extensible Communications Platform, which fails to properly validate login data. This allows...

Cisco Unified Presence / Jabber Extensible Communications Platform DoS

Crash on stream header parsing...

CVE-2012-3935

Cisco Unified Presence CUP before 8.63 and Jabber Extensible Communications Platform aka Jabber XCP before 5.3 allow remote attackers to cause a denial of service process crash via a crafted XMPP stream header, aka Bug ID CSCtu32832...

Cisco Unified Presence and Jabber Extensible Communications Platform Stream Header Denial of Service Vulnerability

A denial of service DoS vulnerability exists in Cisco Unified Presence and Jabber Extensible Communications Platform Jabber XCP. An unauthenticated, remote attacker could exploit this vulnerability by sending a specially crafted Extensible Messaging and Presence Protocol XMPP stream header to an...

CVE-2012-3935: Improper Restriction of Operations within the Bounds of a Memory Buffer

Cisco Unified Presence CUP before 8.63 and Jabber Extensible Communications Platform aka Jabber XCP before 5.3 allow remote attackers to cause a denial of service process crash via a crafted XMPP stream header, aka Bug ID CSCtu32832...

PT-2011-4370

Name of the Vulnerable Software and Affected Versions Cisco Jabber Extensible Communications Platform aka Jabber XCP versions 2.x through 5.4.x before 5.4.0.27581 Cisco Jabber Extensible Communications Platform aka Jabber XCP versions 5.8.x before 5.8.1.27561 Description The issue is related to...

CVE-2011-3287: Undefined Security Weakness

Cisco Jabber Extensible Communications Platform aka Jabber XCP 2.x through 5.4.x before 5.4.0.27581 and 5.8.x before 5.8.1.27561 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service memory and CPU consumption, and process crash via...

Cisco Jabber Extensible Communications Platform / Cisco Unified Presence

Resources exhaustion on XML parsing...

Cisco Security Advisory: Jabber Extensible Communications Platform and Cisco Unified Presence XML Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Jabber Extensible Communications Platform and Cisco Unified Presence XML Denial of Service Vulnerability Advisory ID: cisco-sa-20110928-xcpcupsxml Revision 1.0 For Public Release 2011 September 28 1600 UTC GMT...