Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
c2s/c2s.c in Jabber Open Source Server 2.3.2 and earlier truncates data without ensuring it remains valid UTF-8, which allows remote authenticated users to read system memory or possibly have other unspecified impact via a crafted JID.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Jabber Open Source Server 信息泄露漏洞
Vulnerability Description
Jabber Open Source Server是一套开源的基于XMPP的即时通讯服务器端软件。 Jabber Open Source Server 2.3.2及之前版本的c2s/c2s.c文件中存在安全漏洞，该漏洞源于程序转换数据时没有确保该数据是否是有效的UTF-8格式。远程攻击者可借助特制的JID利用该漏洞读取系统内存。
CVSS Information
N/A
Vulnerability Type
N/A