CVE:CVE-2017-5592
CNNVD:CNNVD-201702-341
profanity是一款使用C语言编写的基于XMPP客户端的控制台。
profanity 0.4.7版本至0.5.0版本中存在安全漏洞，该漏洞源于程序没有正确的实现‘XEP-0280: Message Carbons’。远程攻击者可利用该漏洞冒充任意用户。
solution:Upgrade profanity_project profanity to a higher version than 0.4.7,0.4.7:cyg1,0.4.7:cyg2,0.4.7:cyg3,0.4.7:patch1,0.5.0,0.5.0:rc1,and avoid the version 0.4.7,0.4.7:cyg1,0.4.7:cyg2,0.4.7:cyg3,0.4.7:patch1,0.5.0,0.5.0:rc1