NVD

Id
48078  
Name
CVE-2009-0759  
Description
Multiple CRLF injection vulnerabilities in webadmin in ZNC before 0.066 allow remote authenticated users to modify the znc.conf configuration file and gain privileges via CRLF sequences in the quit message and other vectors.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-03-03  
Modified Date
2009-06-09  
Seq
2009-0759  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
241217 48078 CVE-2009-0759 DSA-1735  View
241218 48078 CVE-2009-0759 [oss-security] 20090301 CVE id request: znc  View
241219 48078 CVE-2009-0759 http://znc.svn.sourceforge.net/viewvc/znc/trunk/modules/webadmin.cpp?view=log&sortby=rev&sortdir=down&pathrev=1395  View
241220 48078 CVE-2009-0759 http://znc.svn.sourceforge.net/viewvc/znc?view=rev&sortby=rev&sortdir=down&revision=1395  View
241221 48078 CVE-2009-0759 http://znc.svn.sourceforge.net/viewvc/znc?view=rev&sortby=rev&sortdir=down&revision=1396  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
44847 JVNDB-2009-005854 ZNC の webadmin における CRLF インジェクションの脆弱性 ZNC の webadmin には、CRLF インジェクションの脆弱性が存在します。 CVE-2009-0759 38190 CVE-2009-0759 48078 6.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005854.html 2009-02-24 2012-12-20 View