CVE-2007-0903

概要

参考情報

• osvdb.org/33179
• secunia.com/advisories/24075 · Vendor Advisory
• process-one.net/en/ejabberd/release_notes/release_note_ejabberd_113
• securityfocus.com/bid/22525
• vupen.com/english/advisories/2007/0570
• exchange.xforce.ibmcloud.com/vulnerabilities/32437

ejabberd のその他の脆弱性

• CVE-2014-8760中 5.0ejabberd before 2.1.13 does not enforce the starttls_required setting when compression is used, which causes clients to establish connection…
• CVE-2013-6169中 4.3The TLS driver in ejabberd before 2.1.12 supports (1) SSLv2 and (2) weak SSL ciphers, which makes it easier for remote attackers to obtain s…
• CVE-2011-4320中 4.0The mod_pubsub module (mod_pubsub.erl) in ejabberd 2.1.8 and 3.0.0-alpha-3 allows remote authenticated users to cause a denial of service (i…
• CVE-2011-1753中 5.0expat_erl.c in ejabberd before 2.1.7 and 3.x before 3.0.0-alpha-3, and exmpp before 0.9.7, does not properly detect recursion during entity …
• CVE-2010-0305中 5.0ejabberd_c2s.erl in ejabberd before 2.1.3 allows remote attackers to cause a denial of service (daemon crash) via a large number of c2s (aka…