EUVD-2012-4594

Malware in sbrugna...

CVE-2012-4671

psyced before 20120821 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted...

Fedora 17 : jabberd-2.2.14-4.fc17 (2012-12487)

included patch for 'Vulnerability in XMPP Server Dialback Implementations' http://xmpp.org/resources/security-notices/server-dialback/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automaticall...

Server side request forgery (ssrf)

Apple iChat Server does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted...

Cross site request forgery (csrf)

M-Link R14.6 before R14.6v14 and R15.1 before R15.1v10 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted...

CVE-2012-3525

s2s/out.c in jabberd2 2.2.16 and earlier does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via a 1 Verify Response or 2 Authorization Response...

Server side request forgery (ssrf)

s2s/out.c in jabberd2 2.2.16 and earlier does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via a 1 Verify Response or 2 Authorization Response...

CVE-2012-4671

psyced before 20120821 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted...

CVE-2012-4669: Improper Input Validation

M-Link R14.6 before R14.6v14 and R15.1 before R15.1v10 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted...

CVE-2012-4670: Improper Input Validation

Tigase XMPP Server before 5.1.0 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via a 1 Verify Response or 2 Authorization Response...

CVE-2012-3525: Improper Input Validation

s2s/out.c in jabberd2 2.2.16 and earlier does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via a 1 Verify Response or 2 Authorization Response...

CVE-2012-4671: Improper Input Validation

psyced before 20120821 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted...

PT-2012-5537

Name of the Vulnerable Software and Affected Versions Tigase XMPP Server versions prior to 5.1.0 Description The issue allows remote XMPP servers to spoof domains via a Verify Response or Authorization Response, due to the lack of verification that a request was made for an XMPP Server Dialback...

PT-2012-5539

Name of the Vulnerable Software and Affected Versions Apple iChat Server affected versions not specified Description The issue concerns a lack of verification in Apple iChat Server for XMPP Server Dialback responses. This allows remote XMPP servers to spoof domains by sending responses for domain...

CVE-2012-4672: Improper Input Validation

Apple iChat Server does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted...

PT-2012-5538

Name of the Vulnerable Software and Affected Versions psyced versions prior to 20120821 Description The issue allows remote XMPP servers to spoof domains via responses for domains that were not asserted, due to a lack of verification that a request was made for an XMPP Server Dialback response...