Alerts This Week
Warning Icon 1 1,154
Alerts This Week
Warning Icon 1 1,154

Ubuntu 16.04 LTS: USN-4506-1 Critical: MCabber Message Interception

ubuntu
Calendar Grey September 16, 2020
Dist Ubuntu Esm H88
A security flaw in MCabber permits unauthorized alterations and interception of messages on Ubuntu 16.04. Guidance for updates is included.
MCabber could be made to modify the roster and intercept messages if it received specially crafted XMPP packets.

Summary

MCabber could be made to modify the roster and intercept messages if it

received specially crafted XMPP packets.

Software Description:

- mcabber: small Jabber (XMPP) console client

Details:

It was discovered that MCabber does not properly manage roster pushes. An

attacker could possibly use this issue to remotely perform

man-in-the-middle attacks. (CVE-2016-9928).

Topics%20covered

Topics Covered

security advisory ubuntu man-in-the-middle message interception XMPP mcabber

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS:
  mcabber                         0.10.2-1+deb8u1build0.16.04.1

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4506-1

CVE-2016-9928

Severity
critical
Lowest
Low
Medium
High
Critical

September 16, 2020

Topics%20covered

Topics Covered

security advisory ubuntu man-in-the-middle message interception XMPP mcabber

Package Information

https://launchpad.net/ubuntu/+source/mcabber/0.10.2-1+deb8u1build0.16.04.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here