CVE-2007-3246

The CVE affects IRC Services (before version 5.0.60) via do_set_password in modules/chanserv/set.c. The root cause is that ChanServ SET PASSWORD preserves channel founder privileges across a password change, enabling remote authenticated users to obtain the new password through automated e‑mail o...