Free and open-source vulnerability scanner
Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.
Install NowAvailable for macOS, Windows, and Linux
Jabber Studio Jabberd Server SASL Negotiation Denial of Service Vulnerability
Information
Severity
Severity
Medium
Family
Family
Denial of Service
CVSSv2 Base
CVSSv2 Base
5.0
CVSSv2 Vector
CVSSv2 Vector
AV:N/AC:L/Au:N/C:N/I:N/A:P
Solution Type
Solution Type
Vendor Patch
Created
Created
10 years ago
Modified
Modified
4 years ago
Summary
This host is running Jabberd server and is prone to denial of service vulnerability.
Insight
Insight
The flaw is caused due to an error within the handling of SASL negotiation. This can be exploited to cause a crash by sending a 'response' stanza before an 'auth' stanza.
Affected Software
Affected Software
Jabber Studio jabberd Server version before 2.0s11
Solution
Solution
Upgrade to Jabber Studio jabberd Server version 2.0s11 or later.