CVE-2016-7145 The m_authenticate function in ircd/m_authenticate.c in nefarious2 allows remote attackers to spoof certificate fingerprints and consequently log in as another user via a crafted AUTHENTICATE paramete...
CriticalCVSS 9.8
EPSS 0.89%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The m_authenticate function in ircd/m_authenticate.c in nefarious2 allows remote attackers to spoof certificate fingerprints and consequently log in as another user via a crafted AUTHENTICATE parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nefarious2 project nefarious2 | = 2.0 | No fix listed |
References
- [oss-security] 20160905 Re: CVE ID request: certificate spoofing through crafted SASL message in inspircd, charybdis mailing-list patch third-party-advisory
- github.com issue-tracking patch third-party-advisory