CVE

Id
88051  
CVE No.
CVE-2016-1232  
Status
Candidate  
Description
The mod_dialback module in Prosody before 0.9.9 does not properly generate random values for the secret token for server-to-server dialback authentication, which makes it easier for attackers to spoof servers via a brute force attack.  
Phase
Assigned (20151227)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
765953 88051 CVE-2016-1232 MLIST:[oss-security] 20160108 CVE-2016-1231, CVE-2016-1232: Prosody XMPP server multiple vulnerabilities  View
765954 88051 CVE-2016-1232 URL:http://www.openwall.com/lists/oss-security/2016/01/08/5  View
765955 88051 CVE-2016-1232 CONFIRM:http://blog.prosody.im/prosody-0-9-9-security-release/  View
765956 88051 CVE-2016-1232 CONFIRM:https://prosody.im/issues/issue/571  View
765957 88051 CVE-2016-1232 CONFIRM:https://prosody.im/security/advisory_20160108-2/  View
765958 88051 CVE-2016-1232 DEBIAN:DSA-3439  View
765959 88051 CVE-2016-1232 URL:http://www.debian.org/security/2016/dsa-3439  View
765960 88051 CVE-2016-1232 FEDORA:FEDORA-2016-38e48069f8  View
765961 88051 CVE-2016-1232 URL:http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175829.html  View
765962 88051 CVE-2016-1232 FEDORA:FEDORA-2016-e289f41b76  View

Related JVN