CVE-2011-2206 in Brad Fitzpatrick DJabberd
Resumen (Inglés)
XMLParser.pm in DJabberd before 0.85 allows remote authenticated users to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption), via an XML external entity declaration in conjunction with an entity reference, a different vulnerability than CVE-2011-1757.
Reservar
2011-05-31
Divulgación
2011-06-22
Voces
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidad | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 57761 | Brad Fitzpatrick DJabberd denegación de servicio | 399 | No está definido | Arreglo oficial | CVE-2011-2206 |