Gabber Information Disclosure Weakness
BID:6624
Info
Gabber Information Disclosure Weakness
| Bugtraq ID: | 6624 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 15 2003 12:00AM |
| Updated: | Jan 15 2003 12:00AM |
| Credit: | Discovery of this vulnerability credited to Greg Troxel <[email protected]>. |
| Vulnerable: |
Gabber Gabber 0.8.7 |
| Not Vulnerable: | |
Discussion
Gabber Information Disclosure Weakness
A weakness has been discovered in Gabber 0.8.7. Reportedly, Gabber sends a presence message to a certain Jabber server. Specifically, Gabber sends a presence message to [email protected] at login and logout time.
A weakness has been discovered in Gabber 0.8.7. Reportedly, Gabber sends a presence message to a certain Jabber server. Specifically, Gabber sends a presence message to [email protected] at login and logout time.
Exploit / POC
Gabber Information Disclosure Weakness
There is no exploit required.
There is no exploit required.
Solution / Fix
Gabber Information Disclosure Weakness
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Gabber Information Disclosure Weakness
References:
References:
- Gabber Home Page (Gabber)
- Gabber 0.8.7 leaks presence information without user authorization (Greg Troxel
)