CVE-2006-1329

MEDIUM 5.0CVE-2006-1329 · Published 21/03/2006 · updated 16/06/2026

In short

CVE-2006-1329 is a MEDIUM (CVSS 5.0) vulnerability affecting jabberd (jabberstudio).
Chance of exploitation in the next 30 days (EPSS): 2.9%, higher than 87.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
jabberd jabberstudio	`= 2.0_a1= 2.0_a2= 2.0_a3= 2.0_a4= 2.0_a5= 2.0_a6= 2.0_b1= 2.0_b2= 2.0_b3= 2.0_rc1= 2.0_rc2= 2.0_s1= 2.0_s2= 2.0_s3= 2.0_s4= 2.0_s5= 2.0_s6= 2.0_s7= 2.0_s8= 2.0_s9≤ 2.0_s10`	No fix yet

Description

The SASL negotiation in Jabber Studio jabberd before 2.0s11 allows remote attackers to cause a denial of service ("c2s segfault") by sending a "response stanza before an auth stanza".

References

article.gmane.org/gmane.network.jabber.admin/27372 · Patch
lists.apple.com/archives/security-announce/2010//Mar/msg00001.html
secunia.com/advisories/19281 · Vendor Advisory
support.apple.com/kb/HT4077
redhat.com/support/errata/RHSA-2008-0261.html
securityfocus.com/bid/17155
vupen.com/english/advisories/2006/1009 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/25334

More vulnerabilities in jabberd

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free