Executive Summary

Informations
Name CVE-2011-4320 First vendor Publication 2012-02-17
Vendor Cve Last vendor Modification 2024-11-21

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:S/C:N/I:N/A:P)
Cvss Base Score 4 Attack Range Network
Cvss Impact Score 2.9 Attack Complexity Low
Cvss Expoit Score 8 Authentication Requires single instance
Calculate full CVSS 2.0 Vectors scores

Detail

The mod_pubsub module (mod_pubsub.erl) in ejabberd 2.1.8 and 3.0.0-alpha-3 allows remote authenticated users to cause a denial of service (infinite loop) via a stanza with a publish tag that lacks a node attribute.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4320

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-399 Resource Management Errors

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 2

OpenVAS Exploits

Date Description
2012-08-10 Name : Gentoo Security Advisory GLSA 201206-10 (ejabberd)
File : nvt/glsa_201206_10.nasl
2012-04-02 Name : Fedora Update for ejabberd FEDORA-2011-16281
File : nvt/gb_fedora_2011_16281_ejabberd_fc16.nasl
2011-12-20 Name : ejabberd 'mod_pubsub' Module Denial of Service Vulnerability
File : nvt/gb_ejabberd_50737.nasl
2011-12-19 Name : Fedora Update for ejabberd FEDORA-2011-16282
File : nvt/gb_fedora_2011_16282_ejabberd_fc15.nasl

Open Source Vulnerability Database (OSVDB)

Id Description
77302 ejabberd mod_pubsub Module <publish> Stanza Parsing Remote DoS

Nessus® Vulnerability Scanner

Date Description
2015-01-19 Name : The remote Solaris system is missing a security patch for third-party software.
File : solaris11_ejabberd_20140731.nasl - Type : ACT_GATHER_INFO
2012-06-22 Name : The remote Gentoo host is missing one or more security-related patches.
File : gentoo_GLSA-201206-10.nasl - Type : ACT_GATHER_INFO
2011-12-19 Name : The remote Fedora host is missing a security update.
File : fedora_2011-16281.nasl - Type : ACT_GATHER_INFO
2011-12-19 Name : The remote Fedora host is missing a security update.
File : fedora_2011-16282.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

http://secunia.com/advisories/46915
http://www.openwall.com/lists/oss-security/2011/11/19/1
http://www.openwall.com/lists/oss-security/2011/11/19/2
http://www.osvdb.org/77302
http://www.process-one.net/en/ejabberd/release_notes/release_note_ejabberd_2.1.9
https://support.process-one.net/browse/EJAB-1498
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
Date Informations
2024-11-28 23:02:45
  • Multiple Updates
2024-11-28 12:27:45
  • Multiple Updates
2021-05-04 12:17:50
  • Multiple Updates
2021-04-22 01:21:08
  • Multiple Updates
2020-05-23 00:32:11
  • Multiple Updates
2016-06-28 18:54:01
  • Multiple Updates
2016-04-26 21:13:45
  • Multiple Updates
2015-01-21 13:25:02
  • Multiple Updates
2014-02-17 11:06:11
  • Multiple Updates
2013-05-10 23:10:25
  • Multiple Updates