Логотип exploitDog
bind:CVE-2013-6404
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2013-6404

Количество 4

Количество 4

ubuntu логотип

CVE-2013-6404

около 12 лет назад

Quassel core (server daemon) in Quassel IRC before 0.9.2 does not properly verify the user ID when accessing user backlogs, which allows remote authenticated users to read other users' backlogs via the bufferid in (1) 16/select_buffer_by_id.sql, (2) 16/select_buffer_by_id.sql, and (3) 16/select_buffer_by_id.sql in core/SQL/PostgreSQL/.

CVSS2: 4
EPSS: Низкий
nvd логотип

CVE-2013-6404

около 12 лет назад

Quassel core (server daemon) in Quassel IRC before 0.9.2 does not properly verify the user ID when accessing user backlogs, which allows remote authenticated users to read other users' backlogs via the bufferid in (1) 16/select_buffer_by_id.sql, (2) 16/select_buffer_by_id.sql, and (3) 16/select_buffer_by_id.sql in core/SQL/PostgreSQL/.

CVSS2: 4
EPSS: Низкий
debian логотип

CVE-2013-6404

около 12 лет назад

Quassel core (server daemon) in Quassel IRC before 0.9.2 does not prop ...

CVSS2: 4
EPSS: Низкий
github логотип

GHSA-pvv4-25p8-vqx8

больше 3 лет назад

Quassel core (server daemon) in Quassel IRC before 0.9.2 does not properly verify the user ID when accessing user backlogs, which allows remote authenticated users to read other users' backlogs via the bufferid in (1) 16/select_buffer_by_id.sql, (2) 16/select_buffer_by_id.sql, and (3) 16/select_buffer_by_id.sql in core/SQL/PostgreSQL/.

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2013-6404

Quassel core (server daemon) in Quassel IRC before 0.9.2 does not properly verify the user ID when accessing user backlogs, which allows remote authenticated users to read other users' backlogs via the bufferid in (1) 16/select_buffer_by_id.sql, (2) 16/select_buffer_by_id.sql, and (3) 16/select_buffer_by_id.sql in core/SQL/PostgreSQL/.

CVSS2: 4
0%
Низкий
около 12 лет назад
nvd логотип
CVE-2013-6404

Quassel core (server daemon) in Quassel IRC before 0.9.2 does not properly verify the user ID when accessing user backlogs, which allows remote authenticated users to read other users' backlogs via the bufferid in (1) 16/select_buffer_by_id.sql, (2) 16/select_buffer_by_id.sql, and (3) 16/select_buffer_by_id.sql in core/SQL/PostgreSQL/.

CVSS2: 4
0%
Низкий
около 12 лет назад
debian логотип
CVE-2013-6404

Quassel core (server daemon) in Quassel IRC before 0.9.2 does not prop ...

CVSS2: 4
0%
Низкий
около 12 лет назад
github логотип
GHSA-pvv4-25p8-vqx8

Quassel core (server daemon) in Quassel IRC before 0.9.2 does not properly verify the user ID when accessing user backlogs, which allows remote authenticated users to read other users' backlogs via the bufferid in (1) 16/select_buffer_by_id.sql, (2) 16/select_buffer_by_id.sql, and (3) 16/select_buffer_by_id.sql in core/SQL/PostgreSQL/.

0%
Низкий
больше 3 лет назад

Уязвимостей на страницу