FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2006-1329

This CVE name corresponds to:

Entered	Topic
2006-05-01	jabberd -- SASL Negotiation Denial of Service Vulnerability

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2006-1329 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2006-1329
Phase	Assigned(20060320)

Description

The SASL negotiation in Jabber Studio jabberd before 2.0s11 allows remote attackers to cause a denial of service ("c2s segfault") by sending a "response stanza before an auth stanza".

References

Source	Reference
CONFIRM	http://article.gmane.org/gmane.network.jabber.admin/27372
CONFIRM	http://support.apple.com/kb/HT4077
APPLE	APPLE-SA-2010-03-29-1
REDHAT	RHSA-2008:0261
BID	17155
VUPEN	ADV-2006-1009
SECUNIA	19281
XF	jabberd-sasl-dos(25334)