CVE-2012-4671

MEDIUM 5.8CVE-2012-4671 · Published 25/08/2012 · updated 16/06/2026

In short

CVE-2012-4671 is a MEDIUM (CVSS 5.8) vulnerability affecting psyced (psyced).
Chance of exploitation in the next 30 days (EPSS): 0.88%, higher than 59.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
psyced psyced	`= 20081120= 20090323= 20090617≤ 20111122`	No fix yet

Description

psyced before 20120821 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted.

References

psyced.org/files/psyced-20120821.tar.bz2
xmpp.org/resources/security-notices/server-dialback

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free