Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The do_set_password function in modules/chanserv/set.c in IRC Services before 5.0.60 preserves channel founder privileges across a channel password change (ChanServ SET PASSWORD), which allows remote authenticated users to obtain the new password through automated e-mail, or perform privileged actions without knowing the new password.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IRC Services执行特权操作漏洞
Vulnerability Description
IRC Services中的do_set_password中存在执行特权操作漏洞。这使得远程认证用户可以通过自动的电子邮件,获得新密码或者在不知道新密码的情况下执行特权操作。
CVSS Information
N/A
Vulnerability Type
N/A