CVE-2007-3246

The CVE affects IRC Services (before version 5.0.60) via do_set_password in modules/chanserv/set.c. The root cause is that ChanServ SET PASSWORD preserves channel founder privileges across a password change, enabling remote authenticated users to obtain the new password through automated e‑mail o...

CVE-2007-3246: Undefined Security Weakness

The dosetpassword function in modules/chanserv/set.c in IRC Services before 5.0.60 preserves channel founder privileges across a channel password change ChanServ SET PASSWORD, which allows remote authenticated users to obtain the new password through automated e-mail, or perform privileged action...