Design/Logic Flaw

2012-08-2516:55:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

35.3%

JSON

psyced before 20120821 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted.

CPENameOperatorVersion
psycedeq20090617
psycedeq20090323
psycedeq20081120
psycedle20111122

Name	Operator	Version
psyced	eq	20090617
psyced	eq	20090323
psyced	eq	20081120
psyced	le	20111122

References

www.psyced.org/files/psyced-20120821.tar.bz2

xmpp.org/resources/security-notices/server-dialback/