If I understand the bug correctly, that's only half the story. Badlop give an example for an exploit on 15/May/09 (sic!) at https://support.process-one.net/browse/EJAB-930. The restriction of a service - like the MUC-service in the example - is not a misconfiguration but can be set very deliberately.
-- Don't send error stanza as reply to error stanza (EJAB-930) https://bugs.launchpad.net/bugs/596676 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs