Lucene search
RedhatCVELIST:CVE-2013-6404HistoryDec 09, 2013 - 11:00 a.m.
CVE-2013-6404
2013-12-0911:00:00
redhat
www.cve.org
Quassel core (server daemon) in Quassel IRC before 0.9.2 does not properly verify the user ID when accessing user backlogs, which allows remote authenticated users to read other users’ backlogs via the bufferid in (1) 16/select_buffer_by_id.sql, (2) 16/select_buffer_by_id.sql, and (3) 16/select_buffer_by_id.sql in core/SQL/PostgreSQL/.
References
lists.opensuse.org/opensuse-updates/2013-12/msg00092.html
lists.opensuse.org/opensuse-updates/2014-01/msg00078.html
osvdb.org/100432
quassel-irc.org/node/123
secunia.com/advisories/55640
www.openwall.com/lists/oss-security/2013/11/28/8
exchange.xforce.ibmcloud.com/vulnerabilities/89377
github.com/quassel/quassel/commit/a1a24da
Related
openvas
openvas
Mageia: Security Advisory (MGASA-2013-0362)
2022-01-28 00:00:00
debiancve
debiancve
CVE-2013-6404
2013-12-09 16:36:47
nessus
nessus
openSUSE Security Update : quassel (openSUSE-SU-2014:0114-1)
2014-06-13 00:00:00
openSUSE Security Update : quassel (openSUSE-SU-2013:1929-1)
2014-06-13 00:00:00
ubuntucve
ubuntucve
CVE-2013-6404
2013-12-09 00:00:00
mageia
mageia
Updated quassel package fixes security vulnerability
2013-12-01 01:42:15
prion
prion
Code injection
2013-12-09 16:36:00
nvd
nvd
CVE-2013-6404
2013-12-09 16:36:47
cve
cve
CVE-2013-6404
2013-12-09 16:36:47