jabberd SASL DoS
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
Configuration 1 [-]
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Red Hat Network Proxy v 4.2 (RHEL 3) | |||
| jabberd-0:2.0s10-3.37.rhn | cpe:/a:redhat:network_proxy:4.2::el3 | RHSA-2008:0523 | 2008-06-30T00:00:00Z |
| rhn-apache-0:1.3.27-36.rhn.rhel3 | cpe:/a:redhat:network_proxy:4.2::el3 | RHSA-2008:0523 | 2008-06-30T00:00:00Z |
| rhn-modperl-0:1.29-16.rhel3 | cpe:/a:redhat:network_proxy:4.2::el3 | RHSA-2008:0523 | 2008-06-30T00:00:00Z |
| Red Hat Network Proxy v 4.2 (RHEL 4) | |||
| jabberd-0:2.0s10-3.38.rhn | cpe:/a:redhat:network_proxy:4.2::el4 | RHSA-2008:0523 | 2008-06-30T00:00:00Z |
| rhn-apache-0:1.3.27-36.rhn.rhel4 | cpe:/a:redhat:network_proxy:4.2::el4 | RHSA-2008:0523 | 2008-06-30T00:00:00Z |
| rhn-modperl-0:1.29-16.rhel4 | cpe:/a:redhat:network_proxy:4.2::el4 | RHSA-2008:0523 | 2008-06-30T00:00:00Z |
| Red Hat Network Proxy v 5.0 | |||
| jabberd-0:2.0s10-3.38.rhn | cpe:/a:redhat:network_proxy:5.0::el4 | RHSA-2008:0263 | 2008-05-20T00:00:00Z |
| rhn-apache-0:1.3.27-36.rhn.rhel4 | cpe:/a:redhat:network_proxy:5.0::el4 | RHSA-2008:0263 | 2008-05-20T00:00:00Z |
| rhn-modperl-0:1.29-16.rhel4 | cpe:/a:redhat:network_proxy:5.0::el4 | RHSA-2008:0263 | 2008-05-20T00:00:00Z |
| Red Hat Network Satellite Server v 4.2 | |||
| jabberd-0:2.0s10-3.38.rhn | cpe:/a:redhat:network_satellite:4.2::el4 | RHSA-2008:0524 | 2008-06-30T00:00:00Z |
| java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4 | cpe:/a:redhat:network_satellite:4.2::el4 | RHSA-2008:0524 | 2008-06-30T00:00:00Z |
| jfreechart-0:0.9.20-3.rhn | cpe:/a:redhat:network_satellite:4.2::el4 | RHSA-2008:0524 | 2008-06-30T00:00:00Z |
| openmotif21-0:2.1.30-11.RHEL4.6 | cpe:/a:redhat:network_satellite:4.2::el4 | RHSA-2008:0524 | 2008-06-30T00:00:00Z |
| perl-Crypt-CBC-0:2.24-1.el4 | cpe:/a:redhat:network_satellite:4.2::el4 | RHSA-2008:0524 | 2008-06-30T00:00:00Z |
| rhn-apache-0:1.3.27-36.rhn.rhel4 | cpe:/a:redhat:network_satellite:4.2::el4 | RHSA-2008:0524 | 2008-06-30T00:00:00Z |
| rhn-modjk-0:1.2.23-2rhn.rhel4 | cpe:/a:redhat:network_satellite:4.2::el4 | RHSA-2008:0524 | 2008-06-30T00:00:00Z |
| rhn-modperl-0:1.29-16.rhel4 | cpe:/a:redhat:network_satellite:4.2::el4 | RHSA-2008:0524 | 2008-06-30T00:00:00Z |
| rhn-modssl-0:2.8.12-8.rhn.10.rhel4 | cpe:/a:redhat:network_satellite:4.2::el4 | RHSA-2008:0524 | 2008-06-30T00:00:00Z |
| tomcat5-0:5.0.30-0jpp_10rh | cpe:/a:redhat:network_satellite:4.2::el4 | RHSA-2008:0524 | 2008-06-30T00:00:00Z |
| Red Hat Network Satellite Server v 4.2 (RHEL3) | |||
| jabberd-0:2.0s10-3.37.rhn | cpe:/a:redhat:network_satellite:4.2::el3 | RHSA-2008:0524 | 2008-06-30T00:00:00Z |
| java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el3 | cpe:/a:redhat:network_satellite:4.2::el3 | RHSA-2008:0524 | 2008-06-30T00:00:00Z |
| jfreechart-0:0.9.20-3.rhn | cpe:/a:redhat:network_satellite:4.2::el3 | RHSA-2008:0524 | 2008-06-30T00:00:00Z |
| openmotif21-0:2.1.30-9.RHEL3.8 | cpe:/a:redhat:network_satellite:4.2::el3 | RHSA-2008:0524 | 2008-06-30T00:00:00Z |
| perl-Crypt-CBC-0:2.24-1.el3 | cpe:/a:redhat:network_satellite:4.2::el3 | RHSA-2008:0524 | 2008-06-30T00:00:00Z |
| rhn-apache-0:1.3.27-36.rhn.rhel3 | cpe:/a:redhat:network_satellite:4.2::el3 | RHSA-2008:0524 | 2008-06-30T00:00:00Z |
| rhn-modjk-0:1.2.23-2rhn.rhel3 | cpe:/a:redhat:network_satellite:4.2::el3 | RHSA-2008:0524 | 2008-06-30T00:00:00Z |
| rhn-modperl-0:1.29-16.rhel3 | cpe:/a:redhat:network_satellite:4.2::el3 | RHSA-2008:0524 | 2008-06-30T00:00:00Z |
| rhn-modssl-0:2.8.12-8.rhn.10.rhel3 | cpe:/a:redhat:network_satellite:4.2::el3 | RHSA-2008:0524 | 2008-06-30T00:00:00Z |
| tomcat5-0:5.0.30-0jpp_10rh | cpe:/a:redhat:network_satellite:4.2::el3 | RHSA-2008:0524 | 2008-06-30T00:00:00Z |
| Red Hat Network Satellite Server v 5.0 | |||
| jabberd-0:2.0s10-3.38.rhn | cpe:/a:redhat:network_satellite:5.0:el4 | RHSA-2008:0261 | 2008-05-20T00:00:00Z |
| java-1.4.2-ibm-0:1.4.2.10-1jpp.2.el4 | cpe:/a:redhat:network_satellite:5.0:el4 | RHSA-2008:0261 | 2008-05-20T00:00:00Z |
| jfreechart-0:0.9.20-3.rhn | cpe:/a:redhat:network_satellite:5.0:el4 | RHSA-2008:0261 | 2008-05-20T00:00:00Z |
| openmotif21-0:2.1.30-11.RHEL4.6 | cpe:/a:redhat:network_satellite:5.0:el4 | RHSA-2008:0261 | 2008-05-20T00:00:00Z |
| perl-Crypt-CBC-0:2.24-1.el4 | cpe:/a:redhat:network_satellite:5.0:el4 | RHSA-2008:0261 | 2008-05-20T00:00:00Z |
| rhn-apache-0:1.3.27-36.rhn.rhel4 | cpe:/a:redhat:network_satellite:5.0:el4 | RHSA-2008:0261 | 2008-05-20T00:00:00Z |
| rhn-modjk-0:1.2.23-2rhn.rhel4 | cpe:/a:redhat:network_satellite:5.0:el4 | RHSA-2008:0261 | 2008-05-20T00:00:00Z |
| rhn-modperl-0:1.29-16.rhel4 | cpe:/a:redhat:network_satellite:5.0:el4 | RHSA-2008:0261 | 2008-05-20T00:00:00Z |
| rhn-modssl-0:2.8.12-8.rhn.10.rhel4 | cpe:/a:redhat:network_satellite:5.0:el4 | RHSA-2008:0261 | 2008-05-20T00:00:00Z |
| tomcat5-0:5.0.30-0jpp_10rh | cpe:/a:redhat:network_satellite:5.0:el4 | RHSA-2008:0261 | 2008-05-20T00:00:00Z |
No data available yet.
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2006-1333 | The SASL negotiation in Jabber Studio jabberd before 2.0s11 allows remote attackers to cause a denial of service ("c2s segfault") by sending a "response stanza before an auth stanza". |
No CVSS v4.0
No CVSS v3.1
No CVSS v3.0
This CVE is not in the KEV list.
Exploit prediction score: 2.9% (2.893% probability within 30 days)
Key SSVC decision points have not yet been added.
No history.