vulnwire
5.0med

CVE-2004-1378

The expat XML parser code, as used in the open source Jabber (jabberd) 1.4.3 and earlier, jadc2s 0.9.0 and earlier, and possibly other pack…

Published 22 y ago · modified 4 mo ago · JSON

CVSS
5.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
2.4%
percentile 84%
Public exploits
0
none known

The expat XML parser code, as used in the open source Jabber (jabberd) 1.4.3 and earlier, jadc2s 0.9.0 and earlier, and possibly other packages, allows remote attackers to cause a denial of service (application crash) via a malformed packet to a socket that accepts XML connections.

Exploit prediction (EPSS)

2.44% probability of exploitation in the next 30 days, higher than 84% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.05.0AV:N/AC:L/Au:N/C:N/I:N/A:P

References

  • securitytracker.com /id?1011384 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • osvdb.org /10257 · vdb-entry, x_refsource_OSVDB, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/17466 · vdb-entry, x_refsource_XF, x_transferred
  • securityfocus.com /bid/11231 · vdb-entry, x_refsource_BID, x_transferred
  • vuxml.org /freebsd/2e25d38b-54d1-11d9-b612-000c6e8f12ef.html · x_refsource_CONFIRM, x_transferred
  • gentoo.org /security/en/glsa/glsa-200409-31.xml · vendor-advisory, x_refsource_GENTOO, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/17467 · vdb-entry, x_refsource_XF, x_transferred
  • securitytracker.com /id?1011383 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • devel.amessage.info /jabberd14/ · x_refsource_CONFIRM, x_transferred
  • mail.jabber.org /pipermail/jabberd/2004-September/002004.html · mailing-list, x_refsource_MLIST, x_transferred
  • marc.info /?l=bugtraq&m=109583829122679&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • secunia.com /advisories/12636 · third-party-advisory, x_refsource_SECUNIA, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.