CVE-2004-1378 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2004-1378
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2004-1378

Description: The expat XML parser code, as used in the open source Jabber (jabberd) 1.4.3 and earlier, jadc2s 0.9.0 and earlier, and possibly other packages, allows remote attackers to cause a denial of service (application crash) via a malformed packet to a socket that accepts XML connections.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/17466 http://xforce.iss.net/xforce/xfdb/17467 ST 1011383 1011384 SAID Secunia Advisory: SA12636 OSVDB 10257 MLIST http://mail.jabber.org/pipermail/jabberd/2004-September/002004.html GENTOO http://www.gentoo.org/security/en/glsa/glsa-200409-31.xml CONFIRM http://devel.amessage.info/jabberd14/ http://www.vuxml.org/freebsd/2e25d38b-54d1-11d9-b612-000c6e8f12ef.html BUGTRAQ http://marc.theaimsgroup.com/?l=bugtraq&m=109583829122679&w=2 BID 11231

Return to the previous page.