Jabber Studio JabberD远程服务拒绝漏洞

It has been reported that this issue has been resolved in the CVS version of the software, although this has not been confirmed. Gentoo Linux has released an advisory (GLSA 200409-31). Gentoo has advised that all jabberd users should upgrade to the latest version: # emerge sync # emerge -pv ">=net-im/jabberd-1.4.3-r4" # emerge ">=net-im/jabberd-1.4.3-r4" For more information please see the referenced Gentoo advisory.

来源: XF 名称: jabberd-xml-dos(17466) 链接:http://xforce.iss.net/xforce/xfdb/17466 来源: BID 名称: 11231 链接:http://www.securityfocus.com/bid/11231 来源: GENTOO 名称: GLSA-200409-31 链接:http://www.gentoo.org/security/en/glsa/glsa-200409-31.xml 来源: BUGTRAQ 名称: 20040920 Possible DoS attack against jabberd 1.4.3 and jadc2s 0.9.0 链接:http://marc.theaimsgroup.com/?l=bugtraq&m=109583829122679&w=2 来源: devel.amessage.info 链接:http://devel.amessage.info/jabberd14/ 来源: www.vuxml.org 链接:http://www.vuxml.org/freebsd/2e25d38b-54d1-11d9-b612-000c6e8f12ef.html 来源: MLIST 名称: [jabberd] 20040919 Jabberd 1.4 critical bug 链接:http://mail.jabber.org/pipermail/jabberd/2004-September/002004.html 来源: XF 名称: jadc2s-xml-dos(17467) 链接:http://xforce.iss.net/xforce/xfdb/17467 来源: OSVDB 名称: 10257 链接:http://www.osvdb.org/10257 来源: SECTRACK 名称: 1011384 链接:http://securitytracker.com/id?1011384 来源: SECTRACK 名称: 1011383 链接:http://securitytracker.com/id?1011383 来源: SECUNIA 名称: 12636 链接:http://secunia.com/advisories/12636