NVD

Id
45117  
Name
CVE-2012-3525  
Description
s2s/out.c in jabberd2 2.2.16 and earlier does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via a (1) Verify Response or (2) Authorization Response.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-08-25  
Modified Date
2013-06-14  
Seq
2012-3525  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
226409 45117 CVE-2012-3525 APPLE-SA-2013-03-14-1  View
226410 45117 CVE-2012-3525 RHSA-2012:1538  View
226411 45117 CVE-2012-3525 RHSA-2012:1539  View
226412 45117 CVE-2012-3525 [jabberd2] 20120821 Fwd: [Security] Vulnerability in XMPP Server Dialback Implementations  View
226413 45117 CVE-2012-3525 [oss-security] 20120822 CVE Request -- jabberd2: Prone to unsolicited XMPP Dialback attacks  View
226414 45117 CVE-2012-3525 [oss-security] 20120822 Re: CVE Request -- jabberd2: Prone to unsolicited XMPP Dialback attacks  View
226415 45117 CVE-2012-3525 55167  View
226416 45117 CVE-2012-3525 http://xmpp.org/resources/security-notices/server-dialback/  View
226417 45117 CVE-2012-3525 https://bugzilla.redhat.com/show_bug.cgi?id=850872  View
226418 45117 CVE-2012-3525 https://github.com/Jabberd2/jabberd2/commit/aabcffae560d5fd00cd1d2ffce5d760353cf0a4d  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28179 JVNDB-2012-003886 jabberd2 の s2s/out.c におけるドメインになりすまされる脆弱性 jabberd2 の s2s/out.c は、XMPP Server Dialback 応答のためのリクエストであることを検証しないため、ドメインになりすまされる脆弱性が存在します。 CVE-2012-3525 56763 CVE-2012-3525 45117 5.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003886.html 2012-08-25 2013-04-02 View