Show filters
5 Total Results
Displaying 1-5 of 5
Sort by:
Attacker Value
Unknown

CVE-2013-6169

Disclosure Date: October 17, 2013 (last updated October 05, 2023)
The TLS driver in ejabberd before 2.1.12 supports (1) SSLv2 and (2) weak SSL ciphers, which makes it easier for remote attackers to obtain sensitive information via a brute-force attack.
0
0
Attacker Value
Unknown

CVE-2011-1753

Disclosure Date: June 21, 2011 (last updated October 04, 2023)
expat_erl.c in ejabberd before 2.1.7 and 3.x before 3.0.0-alpha-3, and exmpp before 0.9.7, does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.
0
0
Attacker Value
Unknown

CVE-2010-0305

Disclosure Date: February 03, 2010 (last updated October 04, 2023)
ejabberd_c2s.erl in ejabberd before 2.1.3 allows remote attackers to cause a denial of service (daemon crash) via a large number of c2s (aka client2server) messages that trigger a queue overload.
0
0
Attacker Value
Unknown

CVE-2009-0934

Disclosure Date: March 18, 2009 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in ejabberd before 2.0.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to links and MUC logs.
0
0
Attacker Value
Unknown

CVE-2007-0903

Disclosure Date: February 13, 2007 (last updated October 04, 2023)
Unspecified vulnerability in the mod_roster_odbc module in ejabberd before 1.1.3 has unknown impact and attack vectors.
0
0