VulnerabilityModified
CVE-2004-1378
The expat XML parser code, as used in the open source Jabber (jabberd) 1.4.3 and earlier, jadc2s 0.9.0 and earlier, and possibly other packages, allows remote attackers to cause a denial of service (application crash) via a malformed packet to a socket…
MEDIUM 5.0EPSS 2.44%
Does this matter?
Lower severity and a low EPSS score (2.44%). Track it; it rarely justifies an emergency change on its own.
Description
The expat XML parser code, as used in the open source Jabber (jabberd) 1.4.3 and earlier, jadc2s 0.9.0 and earlier, and possibly other packages, allows remote attackers to cause a denial of service (application crash) via a malformed packet to a socket that accepts XML connections.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
- EPSS
- 2.44% probability · 83th percentile
- CISA KEV
- Not listed
- Affected
- jabberstudio/jabberd · jabberstudio/jadc2s
- Source
- cve@mitre.org
References
- http://devel.amessage.info/jabberd14/Patch
- http://mail.jabber.org/pipermail/jabberd/2004-September/002004.html
- http://marc.info/?l=bugtraq&m=109583829122679&w=2
- http://secunia.com/advisories/12636
- http://securitytracker.com/id?1011383
- http://securitytracker.com/id?1011384
- http://www.gentoo.org/security/en/glsa/glsa-200409-31.xmlPatch
- http://www.osvdb.org/10257
- http://www.securityfocus.com/bid/11231Patch
- http://www.vuxml.org/freebsd/2e25d38b-54d1-11d9-b612-000c6e8f12ef.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17466
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17467
- http://devel.amessage.info/jabberd14/Patch
- http://mail.jabber.org/pipermail/jabberd/2004-September/002004.html
- http://marc.info/?l=bugtraq&m=109583829122679&w=2
- http://secunia.com/advisories/12636
- http://securitytracker.com/id?1011383
- http://securitytracker.com/id?1011384
- http://www.gentoo.org/security/en/glsa/glsa-200409-31.xmlPatch
- http://www.osvdb.org/10257
- http://www.securityfocus.com/bid/11231Patch
- http://www.vuxml.org/freebsd/2e25d38b-54d1-11d9-b612-000c6e8f12ef.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17466
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17467
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.