CVE-2009-0934

概要

参考情報

• osvdb.org/52714
• secunia.com/advisories/34340 · Vendor Advisory
• secunia.com/advisories/34354
• secunia.com/advisories/34781
• debian.org/security/2009/dsa-1774
• openwall.com/lists/oss-security/2009/03/16/1
• process-one.net/en/ejabberd/release_notes/release_note_ejabberd_204 · Vendor Advisory
• securityfocus.com/bid/34133
• exchange.xforce.ibmcloud.com/vulnerabilities/49289
• redhat.com/archives/fedora-package-announce/2009-March/msg00675.html
• redhat.com/archives/fedora-package-announce/2009-March/msg00735.html

ejabberd のその他の脆弱性

• CVE-2014-8760中 5.0ejabberd before 2.1.13 does not enforce the starttls_required setting when compression is used, which causes clients to establish connection…
• CVE-2013-6169中 4.3The TLS driver in ejabberd before 2.1.12 supports (1) SSLv2 and (2) weak SSL ciphers, which makes it easier for remote attackers to obtain s…
• CVE-2011-4320中 4.0The mod_pubsub module (mod_pubsub.erl) in ejabberd 2.1.8 and 3.0.0-alpha-3 allows remote authenticated users to cause a denial of service (i…
• CVE-2011-1753中 5.0expat_erl.c in ejabberd before 2.1.7 and 3.x before 3.0.0-alpha-3, and exmpp before 0.9.7, does not properly detect recursion during entity …
• CVE-2010-0305中 5.0ejabberd_c2s.erl in ejabberd before 2.1.3 allows remote attackers to cause a denial of service (daemon crash) via a large number of c2s (aka…