CVE-2011-4320

概要

参考情報

• secunia.com/advisories/46915 · Vendor Advisory
• openwall.com/lists/oss-security/2011/11/19/1
• openwall.com/lists/oss-security/2011/11/19/2
• osvdb.org/77302
• process-one.net/en/ejabberd/release_notes/release_note_ejabberd_2.1.9
• support.process-one.net/browse/EJAB-1498 · Patch

ejabberd のその他の脆弱性

• CVE-2014-8760中 5.0ejabberd before 2.1.13 does not enforce the starttls_required setting when compression is used, which causes clients to establish connection…
• CVE-2013-6169中 4.3The TLS driver in ejabberd before 2.1.12 supports (1) SSLv2 and (2) weak SSL ciphers, which makes it easier for remote attackers to obtain s…
• CVE-2011-1753中 5.0expat_erl.c in ejabberd before 2.1.7 and 3.x before 3.0.0-alpha-3, and exmpp before 0.9.7, does not properly detect recursion during entity …
• CVE-2010-0305中 5.0ejabberd_c2s.erl in ejabberd before 2.1.3 allows remote attackers to cause a denial of service (daemon crash) via a large number of c2s (aka…
• CVE-2009-0934中 4.3Cross-site scripting (XSS) vulnerability in ejabberd before 2.0.4 allows remote attackers to inject arbitrary web script or HTML via unknown…