← Back

Brad Fitzpatrick

brad_fitzpatrick

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Djabberd
djabberd
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2011-2206
1Brad Fitzpatrick
1Djabberd
Apr 29, 2026
Jun 22, 2011
N/A· v4
N/A· v3
5.5 MEDIUM· v2
XMLParser.pm in DJabberd before 0.85 allows remote authenticated users to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption), via an XML ex...Show more
XMLParser.pm in DJabberd before 0.85 allows remote authenticated users to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption), via an XML external entity declaration in conjunction with an entity reference, a different vulnerability than CVE-2011-1757.Show less
CVE-2011-1757
1Brad Fitzpatrick
1Djabberd
Apr 29, 2026
Jun 21, 2011
N/A· v4
N/A· v3
5.0 MEDIUM· v2
DJabberd 0.84 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large...Show more
DJabberd 0.84 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.Show less