CVEvulnerability

CVE-2004-0274

7.5 HIGH Published 2004-11-23 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2004-11-23
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Share.mod in Eggheads Eggdrop IRC bot 1.6.10 through 1.6.15 can mistakenly assign STAT_OFFERED status to a bot that is not a sharebot, which allows remote attackers to use STAT_OFFERED to promote a bot to a sharebot and conduct unauthorized activities.

Affected configurations

• eggheads eggdrop irc bot 1.6.10 • eggheads eggdrop irc bot 1.6.11 • eggheads eggdrop irc bot 1.6.12 • eggheads eggdrop irc bot 1.6.13 • eggheads eggdrop irc bot 1.6.14 • eggheads eggdrop irc bot 1.6.15

Related

Referenced by CWE · observed example (2)

  • CWE-266 Incorrect Privilege Assignment weakness
  • CWE-269 Improper Privilege Management weakness

References