Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The generate_dialback function in the mod_dialback module in Prosody before 0.9.10 does not properly separate fields when generating dialback keys, which allows remote attackers to spoof XMPP network domains via a crafted stream id and domain name that is included in the target domain as a suffix.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Prosody mod_dialback模块安全漏洞
Vulnerability Description
Prosody是一套使用Lua语言编写的Jabber/XMPP通信服务器软件。mod_dialback是其中的一个用于本地服务器之间通信的身份验证模块。 Prosody 0.9.10之前版本的mod_dialback模块中的‘generate_dialback’函数存在安全漏洞，该漏洞源于程序生成回拨密钥时没有正确区分字段。远程攻击者可借助以后缀形式包含在目标域中的特制的数据流ID和域名，利用该漏洞伪造XMPP网络域。
CVSS Information
N/A
Vulnerability Type
N/A