CVE-2012-4669

M-Link R14.6-R14.6v14 and R15.1-R15.1v10 - Domain Spoofing via XMPP Server Dialback Response

Title source: llm
STIX 2.1

Description

M-Link R14.6 before R14.6v14 and R15.1 before R15.1v10 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted.

References (2)

Core 2
Core References
Vendor Advisory x_refsource_confirm
http://isode.com/company/wordpress/xmpp-server-dialback/

Scores

EPSS 0.0088
EPSS Percentile 54.7%

Details

CWE
CWE-20
Status published
Products (2)
isode/m-link 14.6
isode/m-link 15.1
Published Aug 25, 2012
Tracked Since Feb 18, 2026