EJabberD Mod_Roster_ODBC Unspecified Vulnerability

Bugtraq ID:	22525
Class:	Unknown
CVE:	CVE-2007-0903
Remote:	Yes
Local:	No
Published:	Feb 12 2007 12:00AM
Updated:	May 12 2015 07:34PM
Credit:	The vendor disclosed this issue.
Vulnerable:	ejabberd ejabberd 1.1.2 ejabberd ejabberd 1.1.1 _2 ejabberd ejabberd 1.1.1_1 ejabberd ejabberd 1.1.1_0
Not Vulnerable:	ejabberd ejabberd 1.1.3

EJabberD Mod_Roster_ODBC Unspecified Vulnerability

ejabberd is prone to an unspecified vulnerability.

Currently, very little is known about this issue. This BID will be updated as more information becomes available.

Versions prior to 1.1.3 are vulnerable.

EJabberD Mod_Roster_ODBC Unspecified Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

EJabberD Mod_Roster_ODBC Unspecified Vulnerability

Solution:
The vendor has released a fix to address this issue. Please see the reference section for information on how to obtain and apply this fix.


ejabberd ejabberd 1.1.1_1

• ejabberd ejabberd-1.1.3.tar.gz
  http://www.process-one.net/downloads/ejabberd/1.1.3/ejabberd-1.1.3.tar .gz

ejabberd ejabberd 1.1.1_0

• ejabberd ejabberd-1.1.3.tar.gz
  http://www.process-one.net/downloads/ejabberd/1.1.3/ejabberd-1.1.3.tar .gz

ejabberd ejabberd 1.1.1 _2

• ejabberd ejabberd-1.1.3.tar.gz
  http://www.process-one.net/downloads/ejabberd/1.1.3/ejabberd-1.1.3.tar .gz

ejabberd ejabberd 1.1.2

• ejabberd ejabberd-1.1.3.tar.gz
  http://www.process-one.net/downloads/ejabberd/1.1.3/ejabberd-1.1.3.tar .gz

EJabberD Mod_Roster_ODBC Unspecified Vulnerability

References:

• ejabberd Web Site (ejabberd)