CVE-2012-4672: Input Validation
Published Aug 25, 2012
·Updated
Apple iChat Server does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted.
Affected Software
1 affected component
Apple iChat Server
Event History
Aug 25, 2012
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-4672?
The severity of CVE-2012-4672 is considered high due to the potential for remote attackers to spoof domains.
2
How do I fix CVE-2012-4672?
To fix CVE-2012-4672, ensure that the XMPP server is updated to the latest version that includes security patches addressing the vulnerability.
3
What systems are affected by CVE-2012-4672?
CVE-2012-4672 affects Apple iChat Server versions prior to security updates that mitigate this issue.
4
What type of attack can exploit CVE-2012-4672?
CVE-2012-4672 can be exploited through domain spoofing by unauthorized remote XMPP servers.
5
Is CVE-2012-4672 still a threat?
CVE-2012-4672 remains a threat for users running unpatched versions of Apple iChat Server.