Debian/jabberd2: unknown
s2s/out.c in jabberd2 2.2.16 and earlier does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via a (1) Verify Response or (2
Action: Upgrade jabberd2 to 2.2.17-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.2.17-1 | - |
Fixed versions
| 2.2.17-1 |
Sources
- osv: DEBIAN-CVE-2012-3525#Debian:14/jabberd2
- https://security-tracker.debian.org/tracker/CVE-2012-3525
published · modified · JSON