CVE:CVE-2011-2206
CNNVD:CNNVD-201106-266
DJabberd 0.85之前版本中的XMLParser.pm中存在资源管理错误漏洞。远程认证用户可借助与实体引用相结合的XML外部实体声明读取任意文件，向内联网服务器发送HTTP请求，或者导致拒绝服务（CPU和内存消耗）。
solution:Upgrade brad_fitzpatrick djabberd to a higher version than 0.84,0.80,0.81,0.82,0.83,and avoid the version (,0.84],0.80,0.81,0.82,0.83