Description
The expat XML parser code, as used in the open source Jabber (jabberd) 1.4.3 and earlier, jadc2s 0.9.0 and earlier, and possibly other packages, allows remote attackers to cause a denial of service (application crash) via a malformed packet to a socket that accepts XML connections.
References
- 1011384 vdb-entry
- 10257 vdb-entry
- jabberd-xml-dos(17466) vdb-entry
- 11231 vdb-entry
- http://www.vuxml.org/freebsd/2e25d38b-54d1-11d9-b612-000c6e8f12ef.html
- GLSA-200409-31 vendor-advisory
- jadc2s-xml-dos(17467) vdb-entry
- 1011383 vdb-entry
- http://devel.amessage.info/jabberd14/
- [jabberd] 20040919 Jabberd 1.4 critical bug mailing-list
- 20040920 Possible DoS attack against jabberd 1.4.3 and jadc2s 0.9.0 mailing-list
- 12636 third-party-advisory