Showing 1 - 2 of 2

CVE-2014-8760

Status Candidate

Overview

ejabberd before 2.1.13 does not enforce the starttls_required setting when compression is used, which causes clients to establish connections without encryption.

Related Files

Mandriva Linux Security Advisory 2015-175: Posted Mar 31, 2015; Authored by Mandriva | Site mandriva.com; Mandriva Linux Security Advisory 2015-175 - A flaw was discovered in ejabberd that allows clients to connect with an unencrypted connection even if starttls_required is set.; tags | advisory; systems | linux, mandriva; advisories | CVE-2014-8760; SHA-256 | 4e10a55aef4c7c41fd2a7da4d7badd54e58df15babffed08a946b2ed90da023f; Download | Favorite | View

Mandriva Linux Security Advisory 2014-207: Posted Oct 24, 2014; Authored by Mandriva | Site mandriva.com; Mandriva Linux Security Advisory 2014-207 - A flaw was discovered in ejabberd that allows clients to connect with an unencrypted connection even if starttls_required is set.; tags | advisory; systems | linux, mandriva; advisories | CVE-2014-8760; SHA-256 | a317ee00d1c5ead5d69019056469278a1ae8d6971022cc4d4682619b8b130715; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days

Red Hat 290 files
Ubuntu 63 files
Debian 20 files
Gentoo 8 files
Apple 6 files
LiquidWorm 4 files
Google Security Research 4 files
Alter Prime 3 files
Spencer McIntyre 3 files
Jann Horn 3 files

File Archives

Systems

AIX (430)
Apple (2,132)
BSD (378)
CentOS (61)
Cisco (1,954)
Debian (7,172)
Fedora (1,693)
FreeBSD (1,247)
Gentoo (4,607)
HPUX (881)
iOS (395)
iPhone (108)
IRIX (220)
Juniper (71)
Linux (52,112)
Mac OS X (696)
Mandriva (3,105)
NetBSD (256)
OpenBSD (490)
RedHat (17,459)
Slackware (941)
Solaris (1,615)
SUSE (1,444)
Ubuntu (10,018)
UNIX (9,482)
UnixWare (188)
Windows (6,785)
Other

CVE-2014-8760

Overview

Related Files

File Archive:

November 2024

Top Authors In Last 30 Days

File Tags

File Archives

Systems