Security Advisory
CVE-2012-4671
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
psyced before 20120821 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted.