PT-2000-1717 · Wircsrv · Wircsrv Irc Server

Published 2000-10-20 · Updated 2016-10-18 · CVE-2000-0785

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions WircSrv IRC Server version 5.07s

Description The issue allows IRC operators to read arbitrary files via the importmotd command. This command is used to set the Message of the Day (MOTD) to the specified file.

Recommendations For version 5.07s, consider restricting access to the importmotd command to prevent unauthorized file reading until a patch is available.

Fix

Related Identifiers

CVE-2000-0785

Affected Products

Wircsrv Irc Server

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2000-0785 · Security Note
• http://marc.info/?l=bugtraq&m=96353027909756&w=2 · Note