Authentication bypass in jabberd2 - CVE-2017-10807

Vulnerability identifier: #VU7399

CSH Severity: Low

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-10807

CWE-ID: CWE-287

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to bypass authentication.

The vulnerability exists due to an error in jabberd2, when sasl.anonymous c2s.xml option is not enabled. A remote unauthenticated attacker can bypass authentication process using SASL ANONYMOUS authentication.

jabberd2
Debian Linux
Fedora
Ubuntu
jabberd2 (Ubuntu package)
jabberd

Update to version 2.6.1.

jabberd2 (Ubuntu package) - update to 2.3.4-1ubuntu2+esm1
jabberd - addressed in versions 2.6.1-1.el7, 2.6.1-1.fc24, 2.6.1-1.fc25, 2.6.1-1.fc26, 2.6.1-2.el6

• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=867032
• https://github.com/jabberd2/jabberd2/commit/8416ae54ecefa670534f27a31db71d048b9c7f16
• https://github.com/jabberd2/jabberd2/releases/tag/jabberd-2.6.1

• Debian update for jabberd2
• Fedora 26 update for jabberd
• Fedora 25 update for jabberd
• Fedora 24 update for jabberd
• Fedora EPEL 7 update for jabberd
• Fedora EPEL 6 update for jabberd
• Ubuntu update for jabberd2