CVE-2010-0305

Published: Feb 3, 2010Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

ejabberd_c2s.erl in ejabberd before 2.1.3 allows remote attackers to cause a denial of service (daemon crash) via a large number of c2s (aka client2server) messages that trigger a queue overload.

Affected (22)

Products: Process One: Ejabberd

1 product

Configuration A

22 vulnerable

Vulnerable Software	Affected Versions
Process One Ejabberd	Up to 2.1.2
Process One Ejabberd	Version 0.9.1
Process One Ejabberd	Version 0.9.8
Process One Ejabberd	Version 0.9
Process One Ejabberd	Version 1.0.0
Process One Ejabberd	Version 1.1.0
Process One Ejabberd	Version 1.1.1.0
Process One Ejabberd	Version 1.1.1.1
Process One Ejabberd	Version 1.1.14
Process One Ejabberd	Version 1.1.1
Process One Ejabberd	Version 1.1.2
Process One Ejabberd	Version 1.1.3
Process One Ejabberd	Version 2.0.0
Process One Ejabberd	Version 2.0.0 beta1
Process One Ejabberd	Version 2.0.0 rc1
Process One Ejabberd	Version 2.0.1_2
Process One Ejabberd	Version 2.0.2
Process One Ejabberd	Version 2.0.3
Process One Ejabberd	Version 2.0.4
Process One Ejabberd	Version 2.0.5
Process One Ejabberd	Version 2.1.0
Process One Ejabberd	Version 2.1.1

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (20)

http://secunia.com/advisories/38337

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/39423

Source: secalert@redhat.com

http://www.debian.org/security/2010/dsa-2033

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2010/01/29/1

Source: secalert@redhat.com

Patch

http://www.openwall.com/lists/oss-security/2010/01/29/5

Source: secalert@redhat.com

Patch

http://www.osvdb.org/62066

Source: secalert@redhat.com

http://www.securityfocus.com/bid/38003

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2010/0894

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/56025

Source: secalert@redhat.com

https://support.process-one.net/browse/EJAB-1173

Source: secalert@redhat.com

http://secunia.com/advisories/38337

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/39423

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2010/dsa-2033

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2010/01/29/1

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.openwall.com/lists/oss-security/2010/01/29/5

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.osvdb.org/62066

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/38003

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2010/0894

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/56025

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.process-one.net/browse/EJAB-1173

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.