CVE-2011-2206

Name of the Vulnerable Software and Affected Versions DJabberd versions prior to 0.85

Description The issue allows remote authenticated users to read arbitrary files and possibly send HTTP requests to intranet servers or cause a denial of service due to CPU and memory consumption. This is achieved via an XML external entity declaration in conjunction with an entity reference.

Recommendations For versions prior to 0.85, update to version 0.85 or later to resolve the issue.