CVE-2012-3525: jabber2 jabberd2 Improper Input Validation

CVSS: 5.8v2.0MediumModified

AliasesRHSA-2012:1538RHSA-2012:1539DEBIAN-CVE-2012-3525

Published 25-08-2012Last modified 06-08-2024

Vulnerability summary

CVE-2012-3525 is a medium (CVSS 5.8) Improper Input Validation vulnerability in jabber2 jabberd2. EPSS estimates a 1.73% chance of exploitation in the next 30 days, higher than 77.3% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk

34/100

0100

Medium · default modelHow is this calculated?

CVSS score

5.8/10

010

Medium · v2.0 (NVD)

EPSS score

1.73%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits1github

Timeline

25-08-2012
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

s2s/out.c in jabberd2 2.2.16 and earlier does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via a (1) Verify Response or (2) Authorization Response.

CVSS metrics

1 score · 1 source · 1 version

v2.05.8

EPSS trend

Probability

1.73%

Chance of exploitation in the next 30 days

Percentile

77%

Versus all other CVEs

30-day change

0.00 pp

From 1.73% on 21-09-2026

21-09-202621-10-2026

EPSS score

1.73%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

githubUnverified
Jabberd2
Maturity: poc

Weaknesses

CWE · root cause

CWE-20Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Affected systems

Redhat2 products

jabberd< 0:2.2.8-20.el5sat | < 0:2.2.8-20.el6sat
jabberd-debuginfo< 0:2.2.8-20.el5sat | < 0:2.2.8-20.el6sat

Debian1 product

jabberd2< 2.2.17-1

Jabber21 product

jabberd22.1.19

Jabberd21 product

jabberd2≤ 2.2.16 | 2.1 | 2.1.1 | 2.1.2 | 2.1.3 | 2.1.4 | 2.1.5 | 2.1.6 | 2.1.7 | 2.1.8 | 2.1.9 | 2.1.10 | 2.1.11 | 2.1.12 | 2.1.13 | 2.1.14 | 2.1.15 | 2.1.16 | 2.1.17 | 2.1.18 | 2.1.20 | 2.1.21 | 2.1.22 | 2.1.23 | 2.1.24 | 2.2.0 | 2.2.1 | 2.2.2 | 2.2.3 | 2.2.4 | 2.2.5 | 2.2.6 | 2.2.7 | 2.2.7.1 | 2.2.8 | 2.2.9 | 2.2.10 | 2.2.11 | 2.2.12 | 2.2.13 | 2.2.14 | 2.2.15

4 vendors · 5 products