CVE-2013-6404: Medium severity Quassel-irc Quassel Irc vulnerability
Quassel core (server daemon) in Quassel IRC before 0.9.2 does not properly verify the user ID when accessing user backlogs, which allows remote authenticated users to read other users' backlogs via the bufferid in (1) 16/selectbufferbyid.sql, (2) 16/selectbufferbyid.sql, and (3) 16/selectbufferbyid.sql in core/SQL/PostgreSQL/.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-6404?
CVE-2013-6404 is rated as a medium severity vulnerability due to improper user ID verification leading to unauthorized access.
How do I fix CVE-2013-6404?
To fix CVE-2013-6404, upgrade Quassel IRC to version 0.9.2 or later, which addresses the user ID verification issue.
Which versions of Quassel IRC are affected by CVE-2013-6404?
Quassel IRC versions prior to 0.9.2, specifically 0.9.0 and 0.9.1, are affected by CVE-2013-6404.
What can be exploited in CVE-2013-6404?
CVE-2013-6404 can be exploited by remote authenticated users to read other users' backlogs without authorization.
Is there a workaround for CVE-2013-6404 if I cannot upgrade?
There is no documented workaround for CVE-2013-6404, so upgrading to a secure version is necessary.