Gentoo GLSA-200804-26: Openfire Denial of Service with Normal Severity

Gentoo Linux Security Advisory GLSA 200804-26 https://security.gentoo.org/ Severity: Normal Title: Openfire: Denial of Service Date: April 23, 2008 Bugs: #217234 ID: 200804-26

Synopsis ======= A design error in Openfire might lead to a Denial of Service.
Background ========= Openfire (formerly Wildfire) is a Java implementation of a complete Jabber server.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-im/openfire < 3.5.0 >= 3.5.0
========== Openfire's connection manager in the file ConnectionManagerImpl.java cannot handle clients that fail to read messages, and has no limit on their session's send buffer.
Impact ===== Remote authenticated attacke...