CVE-2012-3525 in jabberd2
Summary
s2s/out.c in jabberd2 2.2.16 and earlier does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via a (1) Verify Response or (2) Authorization Response.
Reservation
06/14/2012
Disclosure
08/25/2012
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 61801 | jabberd2 XMPP Server Dialback input validation | 20 | Not defined | Official fix | CVE-2012-3525 |