[jabberd] Jabberd 1.4 critical bug

José Antonio Calvo josh at escomposlinux.org
Sun Sep 19 07:44:44 CDT 2004


I have found a bug that I think will make jabberd1.4 crash in any
system that doesn't use UTF8.

I have written a simple exploit:
echo -e '\xef\xbb\xbf'|netcat ip port

Since the bug report system in your web is not working, I decided to
post this here in the hope it will be fixed.

AFAIK the development of jabberd is currently focused on the 2.*
branch, but the migration is not straightforward, so for the many of
us who are still using 1.4 it would be an important fix.


-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 188 bytes
Desc: not available
Url : http://jabberstudio.org/pipermail/jabberd/attachments/20040919/bbb5a133/attachment.pgp

More information about the jabberd mailing list