CVE:CVE-2012-4670
CNNVD:CNNVD-201208-482
Tigase XMPP Server 5.1.0之前版本中存在漏洞，该漏洞源于未验证XMPP Server Dialback响应的请求。远程XMPP服务器通过(1)验证响应或(2)身份验证响应欺骗域。
solution:Upgrade tigase tigase_xmpp_server to a higher version than *:beta2,and avoid the version *:beta2