Jabber Software Foundation

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Jabber Software Foundation records in CISA KEV

No Jabber Software Foundation vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Jabber Server 2 records MEDIUM

Records

2 records in Jabber Server · all components

TI-2004-00863 CVE-2004-0953 · GHSA-q42r-qg2p-v9h3

Buffer overflow in the C2S module in the open source Jabber 2.x server (Jabberd) allows…

MEDIUM 56

Buffer overflow in the C2S module in the open source Jabber 2.x server (Jabberd) allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long username.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.10712 Published 2004-12-01 No fix listed

TI-2004-00012 CVE-2004-0013 · GHSA-6gxj-mcjr-q7gr

jabber 1.4.2, 1.4.2a, and possibly earlier versions, does not properly handle SSL…

LOW 26

jabber 1.4.2, 1.4.2a, and possibly earlier versions, does not properly handle SSL connections, which allows remote attackers to cause a denial of service (crash).

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01798 Published 2004-09-01 No fix listed

Open these records in search →

Critical	1
High	0
Medium	1
Low	0
No CVSS	0