Test ID:	1.3.6.1.4.1.25623.1.0.802825
Category:	Denial of Service
Title:	Jabber Studio Jabberd Server SASL Negotiation DoS Vulnerability
Summary:	Jabberd server is prone to a denial of service (DoS) vulnerability.
Description:	Summary: Jabberd server is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: The flaw is caused due to an error within the handling of SASL negotiation. This can be exploited to cause a crash by sending a 'response' stanza before an 'auth' stanza. Vulnerability Impact: Successful exploitation may allow remote attackers to cause the application to crash, creating a denial-of-service condition. Affected Software/OS: Jabber Studio jabberd Server version before 2.0s11. Solution: Update to version 2.0s11 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2006-1329 http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html BugTraq ID: 17155 http://www.securityfocus.com/bid/17155 http://www.redhat.com/support/errata/RHSA-2008-0261.html http://secunia.com/advisories/19281 http://www.vupen.com/english/advisories/2006/1009 XForce ISS Database: jabberd-sasl-dos(25334) https://exchange.xforce.ibmcloud.com/vulnerabilities/25334
Copyright	Copyright (C) 2012 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.