« Volver al listado

CVE-2007-3246

Estado: ModificadaMedia (5)—

La función do_set_password en modules/chanserv/set.c in IRC Services versiones anteriores a 5.0.60 preserva los privilegios de fundador de canal a través de un cambio de contraseña de canal (ChanServ SET PASSWORD), lo cual permite a usuarios remotos autenticados obtener la nueva contraseña a través del correo electrónico automático, o realizar acciones privilegiadas sin saber la nueva contraseña.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

IRC Services — IRC Services

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-3246",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-06-15T01:30:00.000",
  "references": [
    {
      "url": "http://lists.ircservices.za.net/pipermail/ircservices/2007/005228.html",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://lists.ircservices.za.net/pipermail/ircservices/2007/005229.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/41691",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.ircservices.za.net/Changes.txt",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34945",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://lists.ircservices.za.net/pipermail/ircservices/2007/005228.html",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://lists.ircservices.za.net/pipermail/ircservices/2007/005229.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/41691",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.ircservices.za.net/Changes.txt",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34945",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The do_set_password function in modules/chanserv/set.c in IRC Services before 5.0.60 preserves channel founder privileges across a channel password change (ChanServ SET PASSWORD), which allows remote authenticated users to obtain the new password through automated e-mail, or perform privileged actions without knowing the new password."
    },
    {
      "lang": "es",
      "value": "La función do_set_password en modules/chanserv/set.c in IRC Services versiones anteriores a 5.0.60 preserva los privilegios de fundador de canal a través de un cambio de contraseña de canal (ChanServ SET PASSWORD), lo cual permite a usuarios remotos autenticados obtener la nueva contraseña a través del correo electrónico automático, o realizar acciones privilegiadas sin saber la nueva contraseña."
    }
  ],
  "lastModified": "2026-06-16T22:41:20.760",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:irc_services:irc_services:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "03DAE601-840F-4A36-A5EC-80534365C7E9",
              "versionEndIncluding": "5.0.60"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}