smack: IQ response spoofing

It was found that the ParseRoster component in the Smack XMPP API did not verify the From attribute of a roster-query IQ stanza. A remote attacker could use this flaw to spoof IQ responses...

smack: IQ response spoofing

It was found that the ParseRoster component in the Smack XMPP API did not verify the From attribute of a roster-query IQ stanza. A remote attacker could use this flaw to spoof IQ responses...

CVE-2014-0364

The ParseRoster component in the Ignite Realtime Smack XMPP API before 4.0.0-rc1 does not verify the from attribute of a roster-query IQ stanza, which allows remote attackers to spoof IQ responses via a crafted attribute...

PT-2014-3593

Name of the Vulnerable Software and Affected Versions Smack XMPP API versions prior to 4.0.0-rc1 Description The issue concerns the ParseRoster component, which fails to verify the from attribute of a roster-query IQ stanza. This allows remote attackers to spoof IQ responses by crafting a malicio...

CVE-2014-0364: Insufficient Verification of Data Authenticity

The ParseRoster component in the Ignite Realtime Smack XMPP API before 4.0.0-rc1 does not verify the from attribute of a roster-query IQ stanza, which allows remote attackers to spoof IQ responses via a crafted attribute...