VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 15, 2007· Updated Jun 16, 2026

CVE-2007-3246

CVE-2007-3246

Description

The do_set_password function in modules/chanserv/set.c in IRC Services before 5.0.60 preserves channel founder privileges across a channel password change (ChanServ SET PASSWORD), which allows remote authenticated users to obtain the new password through automated e-mail, or perform privileged actions without knowing the new password.

Affected products

2
  • Irc Services/Irc Services2 versions
    cpe:2.3:a:irc_services:irc_services:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:irc_services:irc_services:*:*:*:*:*:*:*:*range: <=5.0.60
    • (no CPE)range: <5.0.60

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.