First published: Tue Dec 31 2002(Updated: )
irssi IRC client 0.8.4, when downloaded after 14-March-2002, could contain a backdoor in the configuration file, which allows remote attackers to access the system.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Irssi Irssi | =0.8.4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2002-1840 is considered a high-severity vulnerability due to the potential for remote attackers to gain unauthorized access to the system.
To fix CVE-2002-1840, users should uninstall the affected version 0.8.4 of the irssi IRC client and install a secure version that does not contain the backdoor.
You can determine if your irssi version is affected by checking if it is 0.8.4 and was downloaded after March 14, 2002.
The primary risk associated with CVE-2002-1840 is that remote attackers could exploit the backdoor to access and control the compromised system.
If you are using a version of irssi newer than 0.8.4, you are not affected by CVE-2002-1840, but it's always good practice to keep software updated.