znc znc vulnerabilities and exploits

(subscribe to this query)

7.5

CVSSv2

Directory traversal vulnerability in ZNC prior to 0.072 allows remote malicious users to overwrite arbitrary files via a crafted DCC SEND request.

Znc Znc 0.064 Znc Znc 0.060 Znc Znc 0.070 Znc Znc 0.068 Znc Znc 0.044 Znc Znc 0.058 Znc Znc 0.056 Znc Znc 0.066 Znc Znc 0.047 Znc Znc 0.045 Znc Znc 0.062 Znc Znc 0.054 Znc Znc 0.052

4.3

CVSSv2

Stack-based buffer overflow in fish.cpp in the Fish plugin for ZNC, as used in ZNC for Windows (znc-msvc) 0.206 and previous versions, allows remote malicious users to cause a denial of service (crash) via a long string in a DH1080_INIT message.

Znc Znc-msvc Znc Znc-msvc 0.076 Znc Znc-msvc 0.093 Znc Znc-msvc 0.094 Znc Znc-msvc 0.095 Znc Znc-msvc 0.077 Znc Znc-msvc 0.078 Znc Znc-msvc 0.097 Znc Znc-msvc 0.098 Znc Znc-msvc 0.079 Znc Znc-msvc 0.080 Znc Znc-msvc 0.202 Znc Znc-msvc 0.089 Znc Znc-msvc 0.090

6.5

CVSSv2

Multiple CRLF injection vulnerabilities in webadmin in ZNC prior to 0.066 allow remote authenticated users to modify the znc.conf configuration file and gain privileges via CRLF sequences in the quit message and other vectors.

Znc Znc 0.056 Znc Znc 0.058 Znc Znc

10

CVSSv2

The official znc docker images prior to 1.7.1-slim contain a blank password for a root user. Systems using the znc docker container deployed by affected versions of the Docker image may allow an remote malicious user to achieve root access with a blank password.

Znc Znc Docker Image 1.6 Znc Znc Docker Image 1.6-slim Znc Znc Docker Image 1.6.4 Znc Znc Docker Image 1.6.4-slim Znc Znc Docker Image 1.6.5 Znc Znc Docker Image 1.6.5-slim Znc Znc Docker Image 1.6.6 Znc Znc Docker Image 1.6.6-slim Znc Znc Docker Image 1.7.0 Znc Znc Docker Image 1.7.0-slim Znc Znc Docker Image 1.7.1-slim

5

CVSSv2

The CBounceDCCMod::OnPrivCTCP function in bouncedcc.cpp in the bouncedcc module in ZNC 0.200 and 0.202 allows remote malicious users to cause a denial of service (crash) via a crafted DCC RESUME request.

Znc Znc-msvc 0.202 Znc Znc-msvc 0.200

6.5

CVSSv2

Modules.cpp in ZNC prior to 1.7.4-rc1 allows remote authenticated non-admin users to escalate privileges and execute arbitrary code by loading a module with a crafted name.

Znc Znc

4

CVSSv2

The CWebAdminMod::ChanPage function in modules/webadmin.cpp in ZNC prior to 1.4 allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) by adding a channel with the same name as an existing channel but without the leading # character, r...

Znc Znc

5

CVSSv2

NULL pointer dereference vulnerability in ZNC prior to 0.092 caused by traffic stats when there are unauthenticated connections.

Znc Znc

5

CVSSv2

Multiple unspecified vulnerabilities in ZNC 0.092 allow remote malicious users to cause a denial of service (exception and daemon crash) via unknown vectors related to "unsafe substr() calls."

Znc Znc 0.092

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook