Lucene search

K
cve[email protected]CVE-2004-0274
HistoryNov 23, 2004 - 5:00 a.m.

CVE-2004-0274

2004-11-2305:00:00
web.nvd.nist.gov
19
cve-2004-0274
eggheads
eggdrop irc bot
share.mod
stat_offered
unauthorized activities

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.6 Medium

AI Score

Confidence

Low

0.019 Low

EPSS

Percentile

88.6%

Share.mod in Eggheads Eggdrop IRC bot 1.6.10 through 1.6.15 can mistakenly assign STAT_OFFERED status to a bot that is not a sharebot, which allows remote attackers to use STAT_OFFERED to promote a bot to a sharebot and conduct unauthorized activities.

Affected configurations

NVD
Node
eggheadseggdrop_irc_botMatch1.6.10
OR
eggheadseggdrop_irc_botMatch1.6.11
OR
eggheadseggdrop_irc_botMatch1.6.12
OR
eggheadseggdrop_irc_botMatch1.6.13
OR
eggheadseggdrop_irc_botMatch1.6.14
OR
eggheadseggdrop_irc_botMatch1.6.15

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.6 Medium

AI Score

Confidence

Low

0.019 Low

EPSS

Percentile

88.6%

Related for CVE-2004-0274