• info
• discussion
• exploit
• solution
• references

ejabberd MUC Logs Cross Site Scripting Vulnerability

Solution:
The vendor has released an update. Please see the references for more information.


Debian Linux 5.0 hppa

• Debian ejabberd_2.0.1-6+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/e/ejabberd/ejabberd_2.0.1 -6+lenny1_hppa.deb

Debian Linux 5.0 ia-64

• Debian ejabberd_2.0.1-6+lenny1_ia64.deb
  http://security.debian.org/pool/updates/main/e/ejabberd/ejabberd_2.0.1 -6+lenny1_ia64.deb

Debian Linux 5.0 arm

• Debian ejabberd_2.0.1-6+lenny1_arm.deb
  http://security.debian.org/pool/updates/main/e/ejabberd/ejabberd_2.0.1 -6+lenny1_arm.deb

Debian Linux 5.0 armel

• Debian ejabberd_2.0.1-6+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/e/ejabberd/ejabberd_2.0.1 -6+lenny1_armel.deb

Debian Linux 5.0 amd64

• Debian ejabberd_2.0.1-6+lenny1_amd64.deb
  http://security.debian.org/pool/updates/main/e/ejabberd/ejabberd_2.0.1 -6+lenny1_amd64.deb

Debian Linux 5.0 alpha

• Debian ejabberd_2.0.1-6+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/e/ejabberd/ejabberd_2.0.1 -6+lenny1_alpha.deb

Debian Linux 5.0 ia-32

• Debian ejabberd_2.0.1-6+lenny1_i386.deb
  http://security.debian.org/pool/updates/main/e/ejabberd/ejabberd_2.0.1 -6+lenny1_i386.deb

Debian Linux 5.0 mips

• Debian ejabberd_2.0.1-6+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/e/ejabberd/ejabberd_2.0.1 -6+lenny1_mips.deb

Debian Linux 5.0 s/390

• Debian ejabberd_2.0.1-6+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/e/ejabberd/ejabberd_2.0.1 -6+lenny1_s390.deb

Debian Linux 5.0 powerpc

• Debian ejabberd_2.0.1-6+lenny1_powerpc.deb
  http://security.debian.org/pool/updates/main/e/ejabberd/ejabberd_2.0.1 -6+lenny1_powerpc.deb

Debian Linux 5.0 sparc

• Debian ejabberd_2.0.1-6+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/e/ejabberd/ejabberd_2.0.1 -6+lenny1_sparc.deb