CVE-2011-1757

Published: Jun 21, 2011Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

DJabberd 0.84 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.

Affected (5)

Products: Brad Fitzpatrick: Djabberd

Brad Fitzpatrick

1 product

Djabberd

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Brad Fitzpatrick Djabberd	version ≤ 0.84
Brad Fitzpatrick Djabberd	Version 0.80
Brad Fitzpatrick Djabberd	Version 0.81
Brad Fitzpatrick Djabberd	Version 0.82
Brad Fitzpatrick Djabberd	Version 0.83

Related CWEs

CWE-399

References (2)

http://groups.google.com/group/djabberd/msg/e3b250f3c1877ede?dmode=source

Source: secalert@redhat.com

http://groups.google.com/group/djabberd/msg/e3b250f3c1877ede?dmode=source

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.