medium5.8
CVE-2012-4671
psyced before 20120821 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via resp…
Impact
psyced before 20120821 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Psyced | Psyced | through 20111122 Versions 20081120, 20090323, 20090617 |