exploitDog

CVE-2007-3246

Опубликовано: 15 июн. 2007

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

The do_set_password function in modules/chanserv/set.c in IRC Services before 5.0.60 preserves channel founder privileges across a channel password change (ChanServ SET PASSWORD), which allows remote authenticated users to obtain the new password through automated e-mail, or perform privileged actions without knowing the new password.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:irc_services:irc_services:*:*:*:*:*:*:*:*

Версия до 5.0.60 (включая)

EPSS

Процентиль: 68%

0.00566

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-c66c-c4c3-hgxf

github

почти 4 года назад

The do_set_password function in modules/chanserv/set.c in IRC Services before 5.0.60 preserves channel founder privileges across a channel password change (ChanServ SET PASSWORD), which allows remote authenticated users to obtain the new password through automated e-mail, or perform privileged actions without knowing the new password.

EPSS

Процентиль: 68%

0.00566

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other