Lucene search
PRIOn knowledge basePRION:CVE-2013-6404HistoryDec 09, 2013 - 4:36 p.m.
Code injection
2013-12-0916:36:00
PRIOn knowledge base
www.prio-n.com
1
Quassel core (server daemon) in Quassel IRC before 0.9.2 does not properly verify the user ID when accessing user backlogs, which allows remote authenticated users to read other users’ backlogs via the bufferid in (1) 16/select_buffer_by_id.sql, (2) 16/select_buffer_by_id.sql, and (3) 16/select_buffer_by_id.sql in core/SQL/PostgreSQL/.
| CPE | Name | Operator | Version |
|---|---|---|---|
| quassel_irc | le | 0.9.1 | |
| quassel_irc | eq | 0.9.0 |
References
lists.opensuse.org/opensuse-updates/2013-12/msg00092.html
lists.opensuse.org/opensuse-updates/2014-01/msg00078.html
osvdb.org/100432
quassel-irc.org/node/123
secunia.com/advisories/55640
www.openwall.com/lists/oss-security/2013/11/28/8
exchange.xforce.ibmcloud.com/vulnerabilities/89377
github.com/quassel/quassel/commit/a1a24da
Related
openvas
openvas
Mageia: Security Advisory (MGASA-2013-0362)
2022-01-28 00:00:00
debiancve
debiancve
CVE-2013-6404
2013-12-09 16:36:47
nvd
nvd
CVE-2013-6404
2013-12-09 16:36:47
nessus
nessus
openSUSE Security Update : quassel (openSUSE-SU-2014:0114-1)
2014-06-13 00:00:00
openSUSE Security Update : quassel (openSUSE-SU-2013:1929-1)
2014-06-13 00:00:00
ubuntucve
ubuntucve
CVE-2013-6404
2013-12-09 00:00:00
mageia
mageia
Updated quassel package fixes security vulnerability
2013-12-01 01:42:15
cvelist
cvelist
CVE-2013-6404
2013-12-09 11:00:00
cve
cve
CVE-2013-6404
2013-12-09 16:36:47