Jabber Extensible Communications Platform and Cisco Unified Presence XML Denial of Service Vulnerability

A denial of service (DoS) vulnerability exists in Jabber Extensible
Communications Platform (Jabber XCP) and Cisco Unified Presence. An
unauthenticated, remote attacker could exploit this vulnerability by sending
malicious XML to an affected server. Successful exploitation of this
vulnerability could cause elevated memory and CPU utilization, resulting in
memory exhaustion and process crashes. Repeated exploitation could result in a
sustained DoS condition.

There are no workarounds available to mitigate exploitation
of this vulnerability.

This advisory is posted at https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20110928-xcpcupsxml[“https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20110928-xcpcupsxml”].