CVE-2007-4400 CRLF injection vulnerability in the included media script in Konversation allows user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 f...
MediumCVSS 6.8
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
CRLF injection vulnerability in the included media script in Konversation allows user-assisted remote attackers to execute arbitrary IRC commands via CRLF sequences in the name of the song in a .mp3 file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| konversation | All versions | No fix listed |
| debian/konversation(Debian:12) | < 1.0.1-4 | 1.0.1-4 |
| debian/konversation(Debian:13) | < 1.0.1-4 | 1.0.1-4 |
| debian/konversation(Debian:14) | < 1.0.1-4 | 1.0.1-4 |
References
- 20070812 Vulnerability in multiple "now playing" scripts for various IRC clients mailing-list
- 39569 vdb-entry
- 26456 third-party-advisory vendor-advisory
- 29752 third-party-advisory
- 3036 third-party-advisory
- wouter.coekaerts.be
- 20070812 Vulnerability in multiple "now playing" scripts for various IRC clients mailing-list
- 25281 vdb-entry
- irc-multiple-command-execution(35985) vdb-entry
- FEDORA-2008-2122 vendor-advisory
- FEDORA-2008-2062 vendor-advisory
- Debian Security Tracker CVE-2007-4400 vendor-advisory
- bugs.debian.org issue-tracking