CVE-2009-0759: Code Injection
Multiple CRLF injection vulnerabilities in webadmin in ZNC before 0.066 allow remote authenticated users to modify the znc.conf configuration file and gain privileges via CRLF sequences in the quit message and other vectors.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ZNCto a version that resolves this vulnerability.Fixed in 0.066
Event History
Frequently Asked Questions
What is the severity of CVE-2009-0759?
CVE-2009-0759 is classified as a medium severity vulnerability due to the potential for privilege escalation.
How do I fix CVE-2009-0759?
To fix CVE-2009-0759, you should upgrade ZNC to version 0.066 or later, which addresses the CRLF injection vulnerabilities.
What versions of ZNC are affected by CVE-2009-0759?
CVE-2009-0759 affects ZNC versions 0.056, 0.058, and any version up to and including 0.062.
Who can exploit CVE-2009-0759?
CVE-2009-0759 can be exploited by remote authenticated users.
What are the potential consequences of exploiting CVE-2009-0759?
Exploiting CVE-2009-0759 could allow an attacker to modify the znc.conf configuration file and gain elevated privileges.