CVE-2011-2206 in Brad Fitzpatrick DJabberd
Summary
XMLParser.pm in DJabberd before 0.85 allows remote authenticated users to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption), via an XML external entity declaration in conjunction with an entity reference, a different vulnerability than CVE-2011-1757.
Reservation
05/31/2011
Disclosure
06/22/2011
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 57761 | Brad Fitzpatrick DJabberd resource management | 399 | Not defined | Official fix | CVE-2011-2206 |