MCabber before 1.0.4 is vulnerable to roster push attacks, which allows remote attackers to intercept communications, or add themselves as an entity on a 3rd party's roster as another user, which will also garner associated privileges, via crafted XMPP packets.

The remote Ubuntu 16.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4506-1 advisory.

    It was discovered that MCabber does not properly manage roster pushes. An attacker could possibly use this     issue to remotely perform

    machine-in-the-middle attacks. (CVE-2016-9928).

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It was discovered that there was a 'roster push attack' in mcabber, a console-based Jabber (XMPP) client. This is identical to CVE-2015-8688

for gajim.

For Debian 8 'Jessie', this problem has been fixed in version 0.10.2-1+deb8u1.

We recommend that you upgrade your mcabber packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for python3-sleekxmpp fixes the following issues :

  - Check the origin of roster pushes (2015-8688, 2016-9928,     boo#1014976). Also see     https://gultsch.de/gajim_roster_push_and_message_interce     ption.html

  - An error in legacyauth support was fixed

New mcabber packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue.

ID	Name	Product	Family	Severity
140641	Ubuntu 16.04 LTS : MCabber vulnerability (USN-4506-1)	Nessus	Ubuntu Local Security Checks	high
137863	Debian DLA-2260-1 : mcabber security update	Nessus	Debian Local Security Checks	high
96714	openSUSE Security Update : python3-sleekxmpp (openSUSE-2017-137)	Nessus	SuSE Local Security Checks	high
95724	Slackware 14.0 / 14.1 / 14.2 / current : mcabber (SSA:2016-347-02)	Nessus	Slackware Local Security Checks	high

Detections

Analytics

CVE-2016-9928

high

Tenable Plugins

high

high

high

high