| Package | Affected versions | Patched versions |
|---|---|---|
| inspircd | ≤ 2.0.22 |
The m_sasl module in InspIRCd before 2.0.23, when used with a service that supports SASL_EXTERNAL authentication, allows remote attackers to spoof certificate fingerprints and consequently log in as another user via a crafted SASL message.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free