VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 25, 2012· Updated Jun 16, 2026

CVE-2012-4669

CVE-2012-4669

Description

M-Link R14.6 before R14.6v14 and R15.1 before R15.1v10 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted.

Affected products

3
  • Isode/M Link3 versions
    cpe:2.3:a:isode:m-link:14.6:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:isode:m-link:14.6:*:*:*:*:*:*:*
    • cpe:2.3:a:isode:m-link:15.1:*:*:*:*:*:*:*
    • (no CPE)range: < R14.6v14, < R15.1v10

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.