CVE-2016-9928

Name of the Vulnerable Software and Affected Versions: MCabber versions prior to 1.0.4

Description: The issue allows remote attackers to intercept communications or add themselves as an entity on a third party's roster as another user, garnering associated privileges, via crafted XMPP packets. This is achieved through roster push attacks.

Recommendations: For versions prior to 1.0.4, update to version 1.0.4 or later to resolve the issue. As a temporary workaround, consider restricting access to roster management functions until a patch is applied. Avoid using crafted XMPP packets in the affected API endpoints until the issue is resolved.