CVE-2012-3525 Auth bypass in n/a
Remote attackers can spoof XMPP domains by bypassing server dialback verification, allowing unauthorized domain impersonation.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2012-3525?
CVE-2012-3525 is a medium-severity authentication bypass vulnerability in n/a, published on 25 Aug 2012. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
s2s/out.c in jabberd2 2.2.16 and earlier does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via a (1) Verify Response or (2) Authorization Response.
Weakness: CWE-20
Which versions are affected by CVE-2012-3525?
It affects 2 products.
Linux distribution packages (8)
jabberd Red Hat:network_proxy:5.5::el5 | All versions | 0:2.2.8-20.el5sat |
jabberd-debuginfo Red Hat:network_proxy:5.5::el5 | All versions | 0:2.2.8-20.el5sat |
jabberd Red Hat:network_proxy:5.5::el6 | All versions | 0:2.2.8-20.el6sat |
jabberd-debuginfo Red Hat:network_proxy:5.5::el6 | All versions | 0:2.2.8-20.el6sat |
jabberd Red Hat:network_satellite:5.5::el5 | All versions | 0:2.2.8-20.el5sat |
jabberd-debuginfo Red Hat:network_satellite:5.5::el5 | All versions | 0:2.2.8-20.el5sat |
jabberd Red Hat:network_satellite:5.5::el6 | All versions | 0:2.2.8-20.el6sat |
jabberd-debuginfo Red Hat:network_satellite:5.5::el6 | All versions | 0:2.2.8-20.el6sat |
Products include Jabber2 Jabberd2, Jabberd2 Jabberd2.
How do I fix CVE-2012-3525?
Upgrade to a fixed version.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2012-3525 being exploited?
There is no known exploitation of CVE-2012-3525 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2012-3525, GHSA-f2gg-g599-6m5f, RHSA-2012:1538, RHSA-2012:1539.