Jabber Software Foundation: Security Vulnerabilities
Buffer overflow in the C2S module in the open source Jabber 2.x server (Jabberd) allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long username.
CVSS Score
10.0
EPSS Score
0.099
Published
2005-01-10
jabber 1.4.2, 1.4.2a, and possibly earlier versions, does not properly handle SSL connections, which allows remote attackers to cause a denial of service (crash).
CVSS Score
5.0
EPSS Score
0.015
Published
2004-02-03