EUVD-2007-3236

Malware in sbrugna...

CVE-2014-9773: Improper Access Control

modules/chanserv/flags.c in Atheme before 7.2.7 allows remote attackers to modify the Anope FLAGS behavior by registering and dropping the 1 LIST, 2 CLEAR, or 3 MODIFY keyword nicks...

CVE-2007-3246

The CVE affects IRC Services (before version 5.0.60) via do_set_password in modules/chanserv/set.c. The root cause is that ChanServ SET PASSWORD preserves channel founder privileges across a password change, enabling remote authenticated users to obtain the new password through automated e‑mail o...

CVE-2007-3246: Undefined Security Weakness

The dosetpassword function in modules/chanserv/set.c in IRC Services before 5.0.60 preserves channel founder privileges across a channel password change ChanServ SET PASSWORD, which allows remote authenticated users to obtain the new password through automated e-mail, or perform privileged action...

espernet-irc.txt

Date: Fri, 24 Jul 1998 19:05:35 -0500 From: McClain Looney Subject: espernet irc services I didn't think anyone cared about irc, but seeing the mIRC posts on this list, here goes: Espernet irc services below version 3.3.5 are vulnerable to a bug in the add/remove code for chanserv which causes a...