CVE-2007-3246

MEDIUM 5.0CVE-2007-3246 · Published 15/06/2007 · updated 16/06/2026

In short

CVE-2007-3246 is a MEDIUM (CVSS 5.0) vulnerability affecting irc services (irc services).
Chance of exploitation in the next 30 days (EPSS): 1.9%, higher than 79.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
irc services irc_services	`≤ 5.0.60`	No fix yet

Description

The do_set_password function in modules/chanserv/set.c in IRC Services before 5.0.60 preserves channel founder privileges across a channel password change (ChanServ SET PASSWORD), which allows remote authenticated users to obtain the new password through automated e-mail, or perform privileged actions without knowing the new password.

References

lists.ircservices.za.net/pipermail/ircservices/2007/005228.html · Patch
lists.ircservices.za.net/pipermail/ircservices/2007/005229.html
osvdb.org/41691
ircservices.za.net/Changes.txt
exchange.xforce.ibmcloud.com/vulnerabilities/34945

More vulnerabilities in irc services

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free