A vulnerability has been reported in Openfire, which can be exploited by malicious users to bypass certain security restrictions.

The vulnerability is caused due to Openfire not properly respecting the "no password changes" setting, which can be exploited to change passwords by sending jabber:iq:auth "passwd_change" requests to the server.

This is related to:
SA34976

The vulnerability is reported in version 3.6.3. Other versions may also be affected.

Solution
Fixed in version 3.7.0 beta.

Provided and/or discovered by
Daryl Herzmann

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://community.igniterealtime.org/blogs/ignite/2010/08/26/openfire-370-beta-is-released

http://www.igniterealtime.org/issues/browse/JM-1532

http://www.igniterealtime.org/community/message/190288#190288

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers