CVE-2012-4669

M-Link R14.6 before R14.6v14 and R15.1 before R15.1v10 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted...

CVE-2012-4671

psyced before 20120821 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted...

CVE-2012-3525

s2s/out.c in jabberd2 2.2.16 and earlier does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via a 1 Verify Response or 2 Authorization Response...

CVE-2012-4669

M-Link R14.6 before R14.6v14 and R15.1 before R15.1v10 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted...

CVE-2012-3525

s2s/out.c in jabberd2 2.2.16 and earlier does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via a 1 Verify Response or 2 Authorization Response...

CVE-2012-4669: Improper Input Validation

M-Link R14.6 before R14.6v14 and R15.1 before R15.1v10 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted...

PT-2012-4784 · Jabberd2 · Jabberd2

Name of the Vulnerable Software and Affected Versions: jabberd2 versions 2.2.16 and earlier Description: The issue arises from the lack of verification in s2s/out.c for requests related to XMPP Server Dialback responses. This allows remote XMPP servers to spoof domains by sending either a Verify...

CVE-2012-3525: Improper Input Validation

s2s/out.c in jabberd2 2.2.16 and earlier does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via a 1 Verify Response or 2 Authorization Response...

CVE-2012-4670: Improper Input Validation

Tigase XMPP Server before 5.1.0 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via a 1 Verify Response or 2 Authorization Response...

CVE-2012-4671: Improper Input Validation

psyced before 20120821 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted...

CVE-2012-4672: Improper Input Validation

Apple iChat Server does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted...

PT-2012-5536

Name of the Vulnerable Software and Affected Versions M-Link versions prior to R14.6v14 M-Link versions prior to R15.1v10 Description The issue allows remote XMPP servers to spoof domains via responses for domains that were not asserted, due to a lack of verification that a request was made for a...

PT-2012-5538

Name of the Vulnerable Software and Affected Versions psyced versions prior to 20120821 Description The issue allows remote XMPP servers to spoof domains via responses for domains that were not asserted, due to a lack of verification that a request was made for an XMPP Server Dialback response...

PT-2012-5537

Name of the Vulnerable Software and Affected Versions Tigase XMPP Server versions prior to 5.1.0 Description The issue allows remote XMPP servers to spoof domains via a Verify Response or Authorization Response, due to the lack of verification that a request was made for an XMPP Server Dialback...

PT-2012-5539

Name of the Vulnerable Software and Affected Versions Apple iChat Server affected versions not specified Description The issue concerns a lack of verification in Apple iChat Server for XMPP Server Dialback responses. This allows remote XMPP servers to spoof domains by sending responses for domain...

FreeBSD : jabberd -- domain spoofing in server dialback protocol (4d1d2f6d-ec94-11e1-8bd8-0022156e8794)

XMPP Standards Foundation reports : Some implementations of the XMPP Server Dialback protocol RFC 3920/XEP-0220 have not been checking dialback responses to ensure that validated results are correlated with requests. An attacking server could spoof one or more domains in communicating with a...

jabberd -- domain spoofing in server dialback protocol

XMPP Standards Foundation reports: Some implementations of the XMPP Server Dialback protocol RFC 3920/XEP-0220 have not been checking dialback responses to ensure that validated results are correlated with requests. An attacking server could spoof one or more domains in communicating with a...