Detections
Analytics
FreeBSD : ejabberd -- queue overload denial of service vulnerability (a04a3c13-4932-11df-83fb-0015587e2cc1)
medium Nessus Plugin ID 45572
Language:
Synopsis
The remote FreeBSD host is missing a security-related update.Description
The Red Hat security response team reports :A remotely exploitable DoS from XMPP client to ejabberd server via too many 'client2server' messages (causing the message queue on the server to get overloaded, leading to server crash) has been found.
Solution
Update the affected package.See Also
https://support.process-one.net/browse/EJAB-1173
https://www.openwall.com/lists/oss-security/2010/01/29/1
Plugin Details
Severity: Medium
ID: 45572
File Name: freebsd_pkg_a04a3c13493211df83fb0015587e2cc1.nasl
Version: 1.14
Type: local
Family: FreeBSD Local Security Checks
Published: 4/20/2010
Updated: 1/6/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3.6
CVSS v2
Risk Factor: Medium
Base Score: 5
Temporal Score: 3.7
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P
Vulnerability Information
CPE: p-cpe:/a:freebsd:freebsd:ejabberd, cpe:/o:freebsd:freebsd
Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info
Exploit Ease: No known exploits are available
Patch Publication Date: 4/19/2010
Vulnerability Publication Date: 1/29/2010
Reference Information
CVE: CVE-2010-0305
BID: 38003