CVE-2009-0759

Description

Multiple CRLF injection vulnerabilities in webadmin in ZNC before 0.066 allow remote authenticated users to modify the znc.conf configuration file and gain privileges via CRLF sequences in the quit message and other vectors.

References

http://znc.svn.sourceforge.net/viewvc/znc?view=rev&sortby=rev&sortdir=down&revision=1396

http://znc.svn.sourceforge.net/viewvc/znc?view=rev&sortby=rev&sortdir=down&revision=1395

http://znc.svn.sourceforge.net/viewvc/znc/trunk/modules/webadmin.cpp?view=log&sortby=rev&sortdir=down&pathrev=1395

http://www.openwall.com/lists/oss-security/2009/03/01/2

http://www.debian.org/security/2009/dsa-1735

http://secunia.com/advisories/34230

http://osvdb.org/52295

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3