Summary
This host is running Jabberd server and is prone to denial of service vulnerability.
Impact
Successful exploitation may allow remote attackers to cause the application to crash, creating a denial-of-service condition.
Impact Level: Application
Solution
Upgrade to Jabber Studio jabberd Server version 2.0s11 or later, For updates refer to http://jabberd.org/
Insight
The flaw is caused due to an error within the handling of SASL negotiation.
This can be exploited to cause a crash by sending a 'response' stanza before an 'auth' stanza.
Affected
Jabber Studio jabberd Server version before 2.0s11
References
Updated on 2017-03-28
Severity
Classification
-
CVE CVE-2006-1329 -
CVSS Base Score: 5.0
AV:N/AC:L/Au:N/C:N/I:N/A:P
Related Vulnerabilities