CVEvulnerability

CVE-2004-1378

5.0 MEDIUM Published 2004-09-21 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2004-09-21
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P

Description

The expat XML parser code, as used in the open source Jabber (jabberd) 1.4.3 and earlier, jadc2s 0.9.0 and earlier, and possibly other packages, allows remote attackers to cause a denial of service (application crash) via a malformed packet to a socket that accepts XML connections.

Affected configurations

• jabberstudio jabberd 1.4 • jabberstudio jabberd 1.4.1 • jabberstudio jabberd 1.4.2 • jabberstudio jabberd 1.4.2a • jabberstudio jabberd 1.4.3 • jabberstudio jadc2s 0.6 • jabberstudio jadc2s 0.7 • jabberstudio jadc2s 0.8 • jabberstudio jadc2s 0.9

References