CVE-2012-4670 in Tigase XMPP Server
Summary
Tigase XMPP Server before 5.1.0 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via a (1) Verify Response or (2) Authorization Response.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
08/25/2012
Disclosure
08/25/2012
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 61803 | Tigase Tigase XMPP Server XMPP Server Dialback input validation | 20 | Unproven | Official fix | CVE-2012-4670 |