Executive Summary
| Summary | |
|---|---|
| Title | ZNC: Privilege escalation |
| Informations | |||
|---|---|---|---|
| Name | GLSA-200903-02 | First vendor Publication | 2009-03-06 |
| Vendor | Gentoo | Last vendor Modification | 2009-03-06 |
| Severity (Vendor) | High | Revision | N/A |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:S/C:P/I:P/A:P) | |||
|---|---|---|---|
| Cvss Base Score | 6.5 | Attack Range | Network |
| Cvss Impact Score | 6.4 | Attack Complexity | Low |
| Cvss Expoit Score | 8 | Authentication | Requires single instance |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Synopsis A vulnerability in ZNC allows for privilege escalation. Background Description Impact Workaround Resolution References Availability http://security.gentoo.org/glsa/glsa-200903-02.xml |
Original Source
| Url : http://security.gentoo.org/glsa/glsa-200903-02.xml |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 100 % | CWE-94 | Failure to Control Generation of Code ('Code Injection') |
OVAL Definitions
| Definition Id: oval:org.mitre.oval:def:13146 | |||
| Oval ID: | oval:org.mitre.oval:def:13146 | ||
| Title: | DSA-1735-1 znc -- missing input sanitisation | ||
| Description: | It was discovered that znc, an IRC proxy/bouncer, does not properly sanitise input contained in configuration change requests to the webadmin interface. This allows authenticated users to elevate their privileges and indirectly execute arbitrary commands. For the old stable distribution, this problem has been fixed in version 0.045-3+etch2. For the stable distribution, this problem has been fixed in version 0.058-2+lenny1. For the unstable distribution, this problem has been fixed in version 0.066-1. We recommend that you upgrade your znc packages. | ||
| Family: | unix | Class: | patch |
| Reference(s): | DSA-1735-1 CVE-2009-0759 | Version: | 5 |
| Platform(s): | Debian GNU/Linux 4.0 | Product(s): | znc |
| Definition Synopsis: | |||
| |||
| Definition Id: oval:org.mitre.oval:def:8315 | |||
| Oval ID: | oval:org.mitre.oval:def:8315 | ||
| Title: | DSA-1735 znc -- missing input sanitisation | ||
| Description: | It was discovered that znc, an IRC proxy/bouncer, does not properly sanitise input contained in configuration change requests to the webadmin interface. This allows authenticated users to elevate their privileges and indirectly execute arbitrary commands (CVE-2009-0759). | ||
| Family: | unix | Class: | patch |
| Reference(s): | DSA-1735 CVE-2009-0759 | Version: | 3 |
| Platform(s): | Debian GNU/Linux 4.0 | Product(s): | znc |
| Definition Synopsis: | |||
CPE : Common Platform Enumeration
OpenVAS Exploits
| Date | Description |
|---|---|
| 2009-03-20 | Name : Debian Security Advisory DSA 1735-1 (znc) File : nvt/deb_1735_1.nasl |
| 2009-03-13 | Name : Ubuntu USN-731-1 (apache2) File : nvt/ubuntu_731_1.nasl |
| 2009-03-13 | Name : Ubuntu USN-732-1 (dash) File : nvt/ubuntu_732_1.nasl |
| 2009-03-07 | Name : Gentoo Security Advisory GLSA 200903-02 (znc) File : nvt/glsa_200903_02.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 52295 | ZNC Webadmin Module znc.conf QuitMessage Field Security Restriction Bypass |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2009-03-11 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-1735.nasl - Type : ACT_GATHER_INFO |
| 2009-03-08 | Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200903-02.nasl - Type : ACT_GATHER_INFO |
Alert History
| Date | Informations |
|---|---|
| 2014-02-17 11:36:18 |
|
