Lookup for vulnerabilities affecting packages.
| Vulnerability_id | VCID-yk2e-qwmd-r3hb |
| Summary | The generate_dialback function in the mod_dialback module in Prosody before 0.9.10 does not properly separate fields when generating dialback keys, which allows remote attackers to spoof XMPP network domains via a crafted stream id and domain name that is included in the target domain as a suffix. |
| Aliases |
|
| Fixed_packages |
| 0 |
| url |
pkg:deb/debian/prosody@0.8.2-4%2Bdeb7u4 |
| purl |
pkg:deb/debian/prosody@0.8.2-4%2Bdeb7u4 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-5zqs-z9sd-2kap |
|
| 1 |
| vulnerability |
VCID-6jkq-68jn-vbf6 |
|
| 2 |
| vulnerability |
VCID-7gng-znmd-fybz |
|
| 3 |
| vulnerability |
VCID-9fun-u67v-ukeg |
|
| 4 |
| vulnerability |
VCID-9hnj-qfwy-t7bz |
|
| 5 |
| vulnerability |
VCID-ape7-wbd4-f3fa |
|
| 6 |
| vulnerability |
VCID-bvnn-cwwk-5ug8 |
|
| 7 |
| vulnerability |
VCID-d3u6-29xv-d3d7 |
|
| 8 |
| vulnerability |
VCID-dqgn-tvzm-nyhq |
|
| 9 |
| vulnerability |
VCID-pf8t-h7qr-zke4 |
|
| 10 |
| vulnerability |
VCID-qzwt-bgty-3bfr |
|
| 11 |
| vulnerability |
VCID-r361-cy8g-z7b3 |
|
| 12 |
| vulnerability |
VCID-skgm-b471-pkae |
|
| 13 |
| vulnerability |
VCID-te5t-7g5g-h3h1 |
|
| 14 |
| vulnerability |
VCID-v8a7-whdt-8yec |
|
| 15 |
| vulnerability |
VCID-yk2e-qwmd-r3hb |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/prosody@0.8.2-4%252Bdeb7u4 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
|
| Affected_packages |
| 0 |
| url |
pkg:deb/debian/prosody@0.7.0-1squeeze1 |
| purl |
pkg:deb/debian/prosody@0.7.0-1squeeze1 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-5zqs-z9sd-2kap |
|
| 1 |
| vulnerability |
VCID-6jkq-68jn-vbf6 |
|
| 2 |
| vulnerability |
VCID-7gng-znmd-fybz |
|
| 3 |
| vulnerability |
VCID-7zh2-6hq2-e7fn |
|
| 4 |
| vulnerability |
VCID-9fun-u67v-ukeg |
|
| 5 |
| vulnerability |
VCID-9hnj-qfwy-t7bz |
|
| 6 |
| vulnerability |
VCID-ape7-wbd4-f3fa |
|
| 7 |
| vulnerability |
VCID-bvnn-cwwk-5ug8 |
|
| 8 |
| vulnerability |
VCID-d3u6-29xv-d3d7 |
|
| 9 |
| vulnerability |
VCID-dqgn-tvzm-nyhq |
|
| 10 |
| vulnerability |
VCID-pf8t-h7qr-zke4 |
|
| 11 |
| vulnerability |
VCID-qeey-pk5y-abc4 |
|
| 12 |
| vulnerability |
VCID-qzwt-bgty-3bfr |
|
| 13 |
| vulnerability |
VCID-r361-cy8g-z7b3 |
|
| 14 |
| vulnerability |
VCID-skgm-b471-pkae |
|
| 15 |
| vulnerability |
VCID-te5t-7g5g-h3h1 |
|
| 16 |
| vulnerability |
VCID-v8a7-whdt-8yec |
|
| 17 |
| vulnerability |
VCID-yk2e-qwmd-r3hb |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/prosody@0.7.0-1squeeze1 |
|
| 1 |
|
| 2 |
| url |
pkg:deb/debian/prosody@0.8.2-4%2Bdeb7u4 |
| purl |
pkg:deb/debian/prosody@0.8.2-4%2Bdeb7u4 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-5zqs-z9sd-2kap |
|
| 1 |
| vulnerability |
VCID-6jkq-68jn-vbf6 |
|
| 2 |
| vulnerability |
VCID-7gng-znmd-fybz |
|
| 3 |
| vulnerability |
VCID-9fun-u67v-ukeg |
|
| 4 |
| vulnerability |
VCID-9hnj-qfwy-t7bz |
|
| 5 |
| vulnerability |
VCID-ape7-wbd4-f3fa |
|
| 6 |
| vulnerability |
VCID-bvnn-cwwk-5ug8 |
|
| 7 |
| vulnerability |
VCID-d3u6-29xv-d3d7 |
|
| 8 |
| vulnerability |
VCID-dqgn-tvzm-nyhq |
|
| 9 |
| vulnerability |
VCID-pf8t-h7qr-zke4 |
|
| 10 |
| vulnerability |
VCID-qzwt-bgty-3bfr |
|
| 11 |
| vulnerability |
VCID-r361-cy8g-z7b3 |
|
| 12 |
| vulnerability |
VCID-skgm-b471-pkae |
|
| 13 |
| vulnerability |
VCID-te5t-7g5g-h3h1 |
|
| 14 |
| vulnerability |
VCID-v8a7-whdt-8yec |
|
| 15 |
| vulnerability |
VCID-yk2e-qwmd-r3hb |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/prosody@0.8.2-4%252Bdeb7u4 |
|
| 3 |
|
| 4 |
| url |
pkg:deb/debian/prosody@0.9.7-2 |
| purl |
pkg:deb/debian/prosody@0.9.7-2 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-5zqs-z9sd-2kap |
|
| 1 |
| vulnerability |
VCID-6jkq-68jn-vbf6 |
|
| 2 |
| vulnerability |
VCID-7gng-znmd-fybz |
|
| 3 |
| vulnerability |
VCID-9fun-u67v-ukeg |
|
| 4 |
| vulnerability |
VCID-9hnj-qfwy-t7bz |
|
| 5 |
| vulnerability |
VCID-ape7-wbd4-f3fa |
|
| 6 |
| vulnerability |
VCID-bvnn-cwwk-5ug8 |
|
| 7 |
| vulnerability |
VCID-d3u6-29xv-d3d7 |
|
| 8 |
| vulnerability |
VCID-dqgn-tvzm-nyhq |
|
| 9 |
| vulnerability |
VCID-pf8t-h7qr-zke4 |
|
| 10 |
| vulnerability |
VCID-qzwt-bgty-3bfr |
|
| 11 |
| vulnerability |
VCID-r361-cy8g-z7b3 |
|
| 12 |
| vulnerability |
VCID-v8a7-whdt-8yec |
|
| 13 |
| vulnerability |
VCID-yk2e-qwmd-r3hb |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:deb/debian/prosody@0.9.7-2 |
|
| 5 |
|
|
| References |
|
| Weaknesses |
|
| Exploits |
|
| Severity_range_score | null |
| Exploitability | 0.5 |
| Weighted_severity | 0.0 |
| Risk_score | null |
| Resource_url | http://public2.vulnerablecode.io/vulnerabilities/VCID-yk2e-qwmd-r3hb |