Roster exploit

Both myself and buddy1 have blank rosters. I send this packet:

/code

Messenger automatically adds me to buddy1’'s contact list with a subscription of type ‘‘none’’

/code

In fact it looks like this is happening with either subscribe or subscribed it looks like. I just upgraded to 2.2.0, anyone have any idea what is going on here… am I the only one facing this problem?

I have confirmed this issue in another implementation of Jive I have running. Any one have any ideas?