Skip to content
OpenAdvisories

Package · Debian

jabberd2

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Feed

  • Unscored —
    CVE-2017-18226

    The Gentoo net-im/jabberd2 package through 2.6.1 sets the ownership of /var/run/jabber to the jabber account, which mig…

    jabberd2 Debian
  • Unscored —
    CVE-2017-10807

    JabberD 2.x (aka jabberd2) before 2.6.1 allows anyone to authenticate using SASL ANONYMOUS, even when the sasl.anonymou…

    jabberd2 jabberd2 Debian Ubuntu
  • Unscored —
    CVE-2015-2058

    c2s/c2s.c in Jabber Open Source Server 2.3.2 and earlier truncates data without ensuring it remains valid UTF-8, which …

    jabberd2 Debian
  • Unscored —
    CVE-2012-3525

    s2s/out.c in jabberd2 2.2.16 and earlier does not verify that a request was made for an XMPP Server Dialback response, …

    jabberd2 Debian
  • Unscored —
    CVE-2011-1755

    jabberd2 before 2.2.14 does not properly detect recursion during entity expansion, which allows remote attackers to cau…

    jabberd2 Debian
  • Unscored —
    CVE-2006-1329

    The SASL negotiation in Jabber Studio jabberd before 2.0s11 allows remote attackers to cause a denial of service ("c2s …

    jabberd2 Debian