PT-2008-5299 · Bitlbee · Bitlbee

Tero Marttila · Publicado 2008-09-10 · Atualizado 2020-07-14 · CVE-2008-3969

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions BitlBee versions prior to 1.2.3

Description The issue is related to inconsistent handling of the USTATUS IDENTIFIED state, allowing remote attackers to overwrite and hijack existing accounts via unknown vectors.

Recommendations For versions prior to 1.2.3, update to version 1.2.3 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2008-3969

Produtos afetados

Bitlbee

Referências · 15

• https://exchange.xforce.ibmcloud.com/vulnerabilities/45132 · Nota
• http://secunia.com/advisories/31690 · Nota
• http://secunia.com/advisories/31991 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2008-3969 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=461424 · Nota
• http://openwall.com/lists/oss-security/2008/09/09/11 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-3969 · Nota de Segurança
• https://redhat.com/archives/fedora-package-announce/2008-September/msg00587.html · Aviso do Fabricante
• http://bitlbee.org/main.php/changelog.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2008-3969 · Aviso do Fabricante
• http://security.gentoo.org/glsa/glsa-200809-14.xml · Aviso do Fabricante
• http://securityfocus.com/bid/31342 · Nota
• http://openwall.com/lists/oss-security/2008/09/08/1 · Nota
• http://bitlbee.org/main.php/news.r.html · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2008-3969 · Aviso do Fabricante