CVE:CVE-2006-1329
CNNVD:CNNVD-200603-337
在Jabber Studio jabberd 2.0s11之前版本中的SASL谈判程序可以让远程攻击者通过发送一条"response stanza before an auth stanza"制造拒绝服务("c2s segfault") 。
solution:Upgrade jabberstudio jabberd to a higher version than 2.0_s10,2.0_a1,2.0_a2,2.0_a3,2.0_a4,2.0_a5,2.0_a6,2.0_b1,2.0_b2,2.0_b3,2.0_rc1,2.0_rc2,2.0_s1,2.0_s2,2.0_s3,2.0_s4,2.0_s5,2.0_s6,2.0_s7,2.0_s8,2.0_s9,and avoid the version (,2.0_s10],2.0_a1,2.0_a2,2.0_a3,2.0_a4,2.0_a5,2.0_a6,2.0_b1,2.0_b2,2.0_b3,2.0_rc1,2.0_rc2,2.0_s1,2.0_s2,2.0_s3,2.0_s4,2.0_s5,2.0_s6,2.0_s7,2.0_s8,2.0_s9