CVE-2012-4671 psyced before 20120821 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted.
MediumCVSS 5.8
EPSS 0.88%
- Published
- Updated
- Exploit status
- No public exploit known
Description
psyced before 20120821 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| psyced | <= 20111122 | No fix listed |
| psyced | = 20081120 | No fix listed |
| psyced | = 20090323 | No fix listed |
| psyced | = 20090617 | No fix listed |