Lucene search
Gentoo FoundationGLSA-200809-14HistorySep 23, 2008 - 12:00 a.m.
BitlBee: Security bypass
2008-09-2300:00:00
Gentoo Foundation
security.gentoo.org
9
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.014 Low
EPSS
Percentile
86.4%
Background
BitlBee is an IRC to IM gateway that support multiple IM protocols.
Description
Multiple unspecified vulnerabilities were reported, including a NULL pointer dereference.
Impact
A remote attacker could exploit these vulnerabilities to overwrite existing IM accounts.
Workaround
There is no known workaround at this time.
Resolution
All BitlBee users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=net-im/bitlbee-1.2.3"
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Gentoo | any | all | net-im/bitlbee | < 1.2.3 | UNKNOWN |
Related
openvas
openvas
FreeBSD Ports: bitlbee
2008-10-03 00:00:00
Gentoo Security Advisory GLSA 200809-14 (bitlbee)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200809-14 (bitlbee)
2008-09-24 00:00:00
nessus
nessus
FreeBSD : bitlbee -- account recreation security issues (24ec781b-8c11-11dd-9923-0016d325a0ed)
2008-09-28 00:00:00
GLSA-200809-14 : BitlBee: Security bypass
2008-09-24 00:00:00
Fedora 8 : bitlbee-1.2.2-1.fc8 (2008-7712)
2008-09-10 00:00:00
cve
cve
CVE-2008-3969
2008-09-11 01:13:00
CVE-2008-3920
2008-09-04 18:41:00
securityvulns
securityvulns
BitlBee IM to IRC gateway multiple security vulnerabilities
2008-09-29 00:00:00
[ GLSA 200809-14 ] BitlBee: Security bypass
2008-09-29 00:00:00
ubuntucve
ubuntucve
CVE-2008-3969
2008-09-11 00:00:00
CVE-2008-3920
2008-09-04 00:00:00
debiancve
debiancve
CVE-2008-3969
2008-09-11 01:13:00
CVE-2008-3920
2008-09-04 18:41:00
freebsd
freebsd
bitlbee -- account recreation security issues
2008-08-27 00:00:00
prion
prion
Design/Logic Flaw
2008-09-11 01:13:00
Security feature bypass
2008-09-04 18:41:00
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.014 Low
EPSS
Percentile
86.4%
Related for GLSA-200809-14