SUSE CVE-2016-1232

The moddialback module in Prosody before 0.9.9 does not properly generate random values for the secret token for server-to-server dialback authentication, which makes it easier for attackers to spoof servers via a brute force attack...

The vulnerability of the `dialback_without_dialback` option in the `mod_dialback` module of the Prosody Jabber/XMPP server is related to authentication process errors, allowing attackers to access confidential data.

The vulnerability of the dialbackwithoutdialback option in the moddialback module of the Prosody Jabber/XMPP server is related to incorrect authentication of certificates from the remote server. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data...

Authentication Bypass

prosody is vulnerable to authentication bypass. The undocumented dialbackwithoutdialback option in moddialback enables an experimental feature for server-to-server authentication. It does not correctly authenticate remote server certificates, allowing a remote server to impersonate another server...

DEBIAN-CVE-2021-32919

An issue was discovered in Prosody before 0.11.9. The undocumented dialbackwithoutdialback option in moddialback enables an experimental feature for server-to-server authentication. It does not correctly authenticate remote server certificates, allowing a remote server to impersonate another serv...

Unspecified vulnerability in Prosody mod_dialback module

Prosody is a suite of Jabber/XMPP communication server software written in Lua. moddialback is one of the authentication modules used for communication between local servers. A security vulnerability exists in the 'generatedialback' function in the moddialback module in versions of Prosody prior ...

PT-2016-4403

Name of the Vulnerable Software and Affected Versions Prosody versions prior to 0.9.10 Description The issue arises from the generate dialback function in the mod dialback module, which fails to properly separate fields when generating dialback keys. This allows remote attackers to spoof XMPP...

Prosody mod_dialback module spoofing vulnerability

Prosody is a set of Jabber/XMPP communication server software written in Lua. Prosody's moddialback module fails to correctly generate random numbers for the server-to-server dialback authentication secret token, allowing remote attackers to spoof the server by performing a brute-force attack...

DEBIAN-CVE-2016-1232

The moddialback module in Prosody before 0.9.9 does not properly generate random values for the secret token for server-to-server dialback authentication, which makes it easier for attackers to spoof servers via a brute force attack...

CVE-2016-1232

The moddialback module in Prosody before 0.9.9 does not properly generate random values for the secret token for server-to-server dialback authentication, which makes it easier for attackers to spoof servers via a brute force attack...

PT-2016-4657

Name of the Vulnerable Software and Affected Versions Prosody versions prior to 0.9.9 Description The issue concerns the mod dialback module, which does not properly generate random values for the secret token used in server-to-server dialback authentication. This weakness makes it easier for...