psyced before 20120821 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted.
Publication date: Sat, 25 Aug 2012 21:55:00 +0000