SecuritySpace - CVE-2016-6445

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2016-6445

Description: A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) service of the Cisco Meeting Server (CMS) before 2.0.6 and Acano Server before 1.8.18 and 1.9.x before 1.9.6 could allow an unauthenticated, remote attacker to masquerade as a legitimate user. This vulnerability is due to the XMPP service incorrectly processing a deprecated authentication scheme. A successful exploit could allow an attacker to access the system as another user.

Test IDs: 1.3.6.1.4.1.25623.1.0.140044

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2016-6445
BugTraq ID: 93517
http://www.securityfocus.com/bid/93517
http://www.securitytracker.com/id/1037000

CVE ID:	CVE-2016-6445
Description:	A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) service of the Cisco Meeting Server (CMS) before 2.0.6 and Acano Server before 1.8.18 and 1.9.x before 1.9.6 could allow an unauthenticated, remote attacker to masquerade as a legitimate user. This vulnerability is due to the XMPP service incorrectly processing a deprecated authentication scheme. A successful exploit could allow an attacker to access the system as another user.
Test IDs:	1.3.6.1.4.1.25623.1.0.140044
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2016-6445 BugTraq ID: 93517 http://www.securityfocus.com/bid/93517 http://www.securitytracker.com/id/1037000