[jabberd] Jabberd 1.4 critical bug

[José Antonio Calvo]

Hello,

I have found a bug that I think will make jabberd1.4 crash in any
system that doesn't use UTF8.

I have written a simple exploit:
echo -e '\xef\xbb\xbf'|netcat ip port

Since the bug report system in your web is not working, I decided to
post this here in the hope it will be fixed.


AFAIK the development of jabberd is currently focused on the 2.*
branch, but the migration is not straightforward, so for the many of
us who are still using 1.4 it would be an important fix.

Regards,

Jose.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 188 bytes
Desc: not available
Url : http://jabberstudio.org/pipermail/jabberd/attachments/20040919/bbb5a133/attachment.pgp