medium5.8
CVE-2012-4672
Apple iChat Server does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via response…
Impact
Apple iChat Server does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Ichat Server | All versions |