CVE-2012-1576

Summary: CVE-2012-1576 affects Atheme IRC Services. The myuser_delete() function in libathemecore/account.c fails to remove CertFP entries when deleting a user, allowing a remote attacker to access another user’s account or cause a daemon crash by logging in as a deleted user. Affected branches: ...

CVE-2012-1576: Undefined Security Weakness

The myuserdelete function in libathemecore/account.c in Atheme 5.x before 5.2.7, 6.x before 6.0.10, and 7.x before 7.0.0-beta2 does not properly clean up CertFP entries when a user is deleted, which allows remote attackers to access a different user account or cause a denial of service daemon cra...

PT-2012-3351

Name of the Vulnerable Software and Affected Versions Atheme versions 5.x through 5.2.6 Atheme versions 6.x through 6.0.9 Atheme versions 7.x through 7.0.0-beta1 Description The issue arises from the myuser delete function in libathemecore/account.c, which fails to properly clean up CertFP entrie...