First published: Fri Dec 31 2004(Updated: )
The roster import functionality in Jabber Gadu-Gadu Transport (a.k.a. jabber-gg-transport) 2.0.x before 2.0.8, when using libgadu 1.0 and later, allows attackers to cause a denial of service via unknown vectors.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Jabberstudio Jabber Gadu-gadu Transport | =2.0 | |
Jabberstudio Jabber Gadu-gadu Transport | =2.0.3 | |
Jabberstudio Jabber Gadu-gadu Transport | =2.0.5 | |
Jabberstudio Jabber Gadu-gadu Transport | =2.0.6 | |
Jabberstudio Jabber Gadu-gadu Transport | =2.0.4 | |
Jabberstudio Jabber Gadu-gadu Transport | =2.0.2 | |
Jabberstudio Jabber Gadu-gadu Transport | =2.0.1 | |
Jabberstudio Jabber Gadu-gadu Transport | =2.0.7 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2004-2390 is classified as a denial of service vulnerability.
CVE-2004-2390 affects Jabber Gadu-Gadu Transport version 2.0.x prior to 2.0.8.
To fix CVE-2004-2390, upgrade Jabber Gadu-Gadu Transport to version 2.0.8 or later.
Attackers can exploit CVE-2004-2390 to cause a denial of service.
Vulnerable versions include Jabber Gadu-Gadu Transport 2.0.0 through 2.0.7.