CVEvulnerability
CVE-2007-3246
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-06-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Description
The do_set_password function in modules/chanserv/set.c in IRC Services before 5.0.60 preserves channel founder privileges across a channel password change (ChanServ SET PASSWORD), which allows remote authenticated users to obtain the new password through automated e-mail, or perform privileged actions without knowing the new password.
Affected configurations
• irc services irc services (<= 5.0.60)
References
- http://lists.ircservices.za.net/pipermail/ircservices/2007/005228.html Patch
- http://lists.ircservices.za.net/pipermail/ircservices/2007/005229.html lists.ircservices.za.net
- http://osvdb.org/41691 osvdb.org
- http://www.ircservices.za.net/Changes.txt www.ircservices.za.net
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34945 exchange.xforce.ibmcloud.com
- http://lists.ircservices.za.net/pipermail/ircservices/2007/005228.html Patch
- http://lists.ircservices.za.net/pipermail/ircservices/2007/005229.html lists.ircservices.za.net
- http://osvdb.org/41691 osvdb.org
- http://www.ircservices.za.net/Changes.txt www.ircservices.za.net
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34945 exchange.xforce.ibmcloud.com