CVE

Id
26603  
CVE No.
CVE-2007-3246  
Status
Candidate  
Description
The do_set_password function in modules/chanserv/set.c in IRC Services before 5.0.60 preserves channel founder privileges across a channel password change (ChanServ SET PASSWORD), which allows remote authenticated users to obtain the new password through automated e-mail, or perform privileged actions without knowing the new password.  
Phase
Assigned (20070614)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
270088 26603 CVE-2007-3246 MLIST:[IRCServices] 20070324 Regarding Founder Passwords  View
270089 26603 CVE-2007-3246 URL:http://lists.ircservices.za.net/pipermail/ircservices/2007/005228.html  View
270090 26603 CVE-2007-3246 MLIST:[IRCServices] 20070324 Services 5.0.60 released  View
270091 26603 CVE-2007-3246 URL:http://lists.ircservices.za.net/pipermail/ircservices/2007/005229.html  View
270092 26603 CVE-2007-3246 CONFIRM:http://www.ircservices.za.net/Changes.txt  View
270093 26603 CVE-2007-3246 OSVDB:41691  View
270094 26603 CVE-2007-3246 URL:http://osvdb.org/41691  View
270095 26603 CVE-2007-3246 XF:ircservices-doset-privilege-escalation(34945)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51792 JVNDB-2007-000455 Sun Solaris における IPv6 の IPsec パケット処理によるサービス運用妨害 (DoS) の脆弱性 Sun Solaris の IPv6 の実装において IPsec を使用しない環境下で、特定の IPsec パケットを処理した際にサービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2007-3248 26603 7.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000455.html  View