CVE-2015-2058

Mô tả

Tham khảo

• openwall.com/lists/oss-security/2015/02/09/13
• openwall.com/lists/oss-security/2015/02/23/25
• securityfocus.com/bid/72731
• jabberd2/jabberd2

Lỗ hổng khác của jabberd2

• CVE-2017-18226TRUNG BÌNH 5.5The Gentoo net-im/jabberd2 package through 2.6.1 sets the ownership of /var/run/jabber to the jabber account, which might allow local users …
• CVE-2017-18225CAO 7.8The Gentoo net-im/jabberd2 package through 2.6.1 installs jabberd, jabberd2-c2s, jabberd2-router, jabberd2-s2s, and jabberd2-sm in /usr/bin …
• CVE-2017-10807NGHIÊM TRỌNG 9.8JabberD 2.x (aka jabberd2) before 2.6.1 allows anyone to authenticate using SASL ANONYMOUS, even when the sasl.anonymous c2s.xml option is n…
• CVE-2012-3525TRUNG BÌNH 5.8s2s/out.c in jabberd2 2.2.16 and earlier does not verify that a request was made for an XMPP Server Dialback response, which allows remote X…
• CVE-2011-1755CAO 7.5jabberd2 before 2.2.14 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of servic…