Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 09/12/2013 Updated: 29/08/2017

CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8

VMScore: 356

Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N

Quassel core (server daemon) in Quassel IRC prior to 0.9.2 does not properly verify the user ID when accessing user backlogs, which allows remote authenticated users to read other users' backlogs via the bufferid in (1) 16/select_buffer_by_id.sql, (2) 16/select_buffer_by_id.sql, and (3) 16/select_buffer_by_id.sql in core/SQL/PostgreSQL/.

Vulnerable Product	Search on Vulmon	Subscribe to Product
quassel-irc quassel irc
quassel-irc quassel irc 0.9.0

CWE-264 http://secunia.com/advisories/55640 http://www.openwall.com/lists/oss-security/2013/11/28/8 http://osvdb.org/100432 http://quassel-irc.org/node/123 https://github.com/quassel/quassel/commit/a1a24da http://lists.opensuse.org/opensuse-updates/2013-12/msg00092.html http://lists.opensuse.org/opensuse-updates/2014-01/msg00078.html https://exchange.xforce.ibmcloud.com/vulnerabilities/89377 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2013-6404

Vulnerability Summary

Vulnerability Trend

References

Vulmon Search

About

Products

Connect