CVE-2011-2206: Medium severity Brad Fitzpatrick Djabberd vulnerability
XMLParser.pm in DJabberd before 0.85 allows remote authenticated users to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption), via an XML external entity declaration in conjunction with an entity reference, a different vulnerability than CVE-2011-1757.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-2206?
CVE-2011-2206 is classified as a moderate severity vulnerability as it allows authenticated users to read arbitrary files and potentially disrupt services.
How do I fix CVE-2011-2206?
To fix CVE-2011-2206, upgrade DJabberd to version 0.85 or later, which contains patches to mitigate the vulnerability.
What versions of DJabberd are affected by CVE-2011-2206?
CVE-2011-2206 affects all versions of DJabberd prior to version 0.85, including versions 0.80 to 0.84.
What types of attacks can CVE-2011-2206 enable?
CVE-2011-2206 can enable remote authenticated users to read arbitrary files, send unauthorized HTTP requests, and potentially cause denial of service.
Is CVE-2011-2206 exploitable remotely?
Yes, CVE-2011-2206 is exploitable remotely by authenticated users through XML external entity declarations.