Improper Privilege Management in mcabber - CVE-2016-9928
Published: February 6, 2020 / Updated: August 9, 2020
Vulnerability identifier: #VU41114
CSH Severity: Medium
CVSS v4: 9.1 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2016-9928
CWE-ID: CWE-269
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote non-authenticated attacker to read and manipulate data.
MCabber before 1.0.4 is vulnerable to roster push attacks, which allows remote attackers to intercept communications, or add themselves as an entity on a 3rd party's roster as another user, which will also garner associated privileges, via crafted XMPP packets.
Affected software
mcabber
Slackware Linux
Ubuntu
mcabber (Ubuntu package)
Slackware Linux
Ubuntu
mcabber (Ubuntu package)
How to mitigate CVE-2016-9928
Install update from vendor's website.
mcabber - update to 1.0.4
mcabber (Ubuntu package) - update to 0.10.2-1+deb8u1build0.16.04.1
mcabber (Ubuntu package) - update to 0.10.2-1+deb8u1build0.16.04.1
External References
- http://lists.opensuse.org/opensuse-updates/2017-01/msg00130.html
- http://www.openwall.com/lists/oss-security/2016/12/11/2
- http://www.openwall.com/lists/oss-security/2017/02/09/29
- http://www.securityfocus.com/bid/94862
- https://bitbucket.org/McKael/mcabber-crew/commits/6e1ead98930d7dd0a520ad17c720ae4908429033/raw
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=845258
- https://bugzilla.redhat.com/show_bug.cgi?id=1403790
- https://gultsch.de/gajim_roster_push_and_message_interception.html
- https://lists.debian.org/debian-lts-announce/2020/06/msg00031.html