CVE-2008-3920 Unspecified vulnerability in BitlBee before 1.2.2 allows remote attackers to "recreate" and "hijack" existing accounts via unspecified vectors.
HighCVSS 7.5
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in BitlBee before 1.2.2 allows remote attackers to "recreate" and "hijack" existing accounts via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bitlbee | <= 1.2.1 | No fix listed |
| bitlbee | = 0.71 | No fix listed |
| bitlbee | = 0.72 | No fix listed |
| bitlbee | = 0.73 | No fix listed |
| bitlbee | = 0.74 | No fix listed |
| bitlbee | = 0.74-a | No fix listed |
| bitlbee | = 0.80 | No fix listed |
| bitlbee | = 0.81 | No fix listed |
| bitlbee | = 0.81-a | No fix listed |
| bitlbee | = 0.82 | No fix listed |
| bitlbee | = 0.83 | No fix listed |
| bitlbee | = 0.84 | No fix listed |
| bitlbee | = 0.85 | No fix listed |
| bitlbee | = 0.85-a | No fix listed |
| bitlbee | = 0.90 | No fix listed |
| bitlbee | = 0.90-a | No fix listed |
| bitlbee | = 0.91 | No fix listed |
| bitlbee | = 0.92 | No fix listed |
| bitlbee | = 0.93 | No fix listed |
| bitlbee | = 0.93-a | No fix listed |
| bitlbee | = 0.99 | No fix listed |
| bitlbee | = 1.0 | No fix listed |
| bitlbee | = 1.0.1 | No fix listed |
| bitlbee | = 1.0.2 | No fix listed |
| bitlbee | = 1.0.3 | No fix listed |
Show 6 more
| Product | Affected versions | Fixed in |
|---|---|---|
| bitlbee | = 1.0.4 | No fix listed |
| bitlbee | = 1.1-dev | No fix listed |
| bitlbee | = 1.1.1-dev | No fix listed |
| bitlbee | = 1.2 | No fix listed |
| debian/bitlbee(Debian:12) | < 1.2.2-1 | 1.2.2-1 |
| debian/bitlbee(Debian:13) | < 1.2.2-1 | 1.2.2-1 |
References
- bitlbee.org
- 31633 third-party-advisory vendor-advisory
- 31690 third-party-advisory
- 31991 third-party-advisory
- GLSA-200809-14 vendor-advisory
- 30858 vdb-entry
- bugzilla.redhat.com
- bitlbee-unspecified-security-bypass(44699) vdb-entry
- FEDORA-2008-7274 vendor-advisory
- FEDORA-2008-7712 vendor-advisory
- FEDORA-2008-7830 vendor-advisory
- Debian Security Tracker CVE-2008-3920 vendor-advisory