Red Hat Security Advisory

RHSA-2012:1538

Red Hat Network Satellite server jabberd security update

Released 2012-12-04 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Satellite 5.5 (RHEL v.5) jabberd-2.2.8-20.el5sat
Red Hat Satellite 5.5 (RHEL v.6) jabberd-2.2.8-20.el6sat

Fixes 1 record

TI-2012-03053 CVE-2012-3525 · GHSA-f2gg-g599-6m5f

s2s/out.c in jabberd2 2.2.16 and earlier does not verify that a request was made for an…

LOW 30

s2s/out.c in jabberd2 2.2.16 and earlier does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via a (1) Verify Response or (2) Authorization Resp…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.0173 Published 2012-08-25 Fixed CWE-20