Ubuntu notice covers jabberd2 flaw that allowed SASL ANONYMOUS login when disabled
VULNERABILITYredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
Ubuntu Security Notice USN-8984-1 reports that jabberd2 allowed SASL ANONYMOUS authentication even when it was not enabled in the configuration. A remote attacker could possibly exploit this to bypass authentication.
For IT people · Written by AI from 1 source · Wrong?
What to do
- Check whether jabberd2 is installed on your systems.
- Review Ubuntu notice USN-8984-1 and apply the update it provides.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Ubuntu Security Notices