JabberD 2.x (aka jabberd2) before 2.6.1 allows anyone to authenticate using SASL ANONYMOUS, even when the sasl.anonymous c2s.xml option is not enabled.

The remote Ubuntu 16.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-8984-1 advisory.

    It was discovered that jabberd2 allowed SASL ANONYMOUS authentication even when it was not enabled in the     configuration. A remote attacker could possibly use this issue to bypass authentication.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - JabberD 2.x (aka jabberd2) before 2.6.1 allows anyone to authenticate using SASL ANONYMOUS, even when the     sasl.anonymous c2s.xml option is not enabled. (CVE-2017-10807)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote host is affected by the vulnerability described in GLSA-201803-07 (JabberD 2.x: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Gentoo&rsquo;s JabberD 2.x       ebuild. Please review the referenced CVE identifiers for details.
  Impact :

    An attacker could possibly escalate privileges by owning system binaries       in trusted locations, cause a Denial of Service condition by manipulating       the PID file from jabberd2 services, bypass security via SASL ANONYMOUS       connections or have other unspecified impacts.
  Workaround :

    There is no known workaround at this time.

SecurityFocus reports :

JabberD is prone to an authentication-bypass vulnerability. An attacker can exploit this issue to bypass the authentication mechanism and perform unauthorized actions. This may lead to further attacks.

updated to 2.6.1 (security bugfix release)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that jabberd2, a Jabber instant messenger server, allowed anonymous SASL connections, even if disabled in the configuration.

ID	Name	Product	Family	Type	Severity
375869	Ubuntu 16.04 LTS : jabberd2 vulnerability (USN-8984-1)	Nessus	Ubuntu Local Security Checks	Local	critical
256674	Linux Distros Unpatched Vulnerability : CVE-2017-10807	Nessus	Misc.	Local	critical
108433	GLSA-201803-07 : JabberD 2.x: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	Local	critical
102010	FreeBSD : jabberd -- authentication bypass vulnerability (76d80b33-7211-11e7-998a-08606e47f965)	Nessus	FreeBSD Local Security Checks	Local	critical
101874	Fedora 24 : jabberd (2017-f6361db8fd)	Nessus	Fedora Local Security Checks	Local	critical
101777	Fedora 25 : jabberd (2017-9dd1004ad8)	Nessus	Fedora Local Security Checks	Local	critical
101604	Fedora 26 : jabberd (2017-313712a583)	Nessus	Fedora Local Security Checks	Local	critical
101240	Debian DSA-3902-1 : jabberd2 - security update	Nessus	Debian Local Security Checks	Local	critical

Detections

Analytics

CVE-2017-10807

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical