CVE-2013-6404
Quassel core (server daemon) in Quassel IRC before 0.9.2 does not properly verify the user ID when accessing user backlogs, which allows remote authenticated users to read other users' backlogs via the bufferid in (1) 16/select_buffer_by_id.sql, (2)…
Does this matter?
Lower severity and a low EPSS score (2.06%). Track it; it rarely justifies an emergency change on its own.
Description
Quassel core (server daemon) in Quassel IRC before 0.9.2 does not properly verify the user ID when accessing user backlogs, which allows remote authenticated users to read other users' backlogs via the bufferid in (1) 16/select_buffer_by_id.sql, (2) 16/select_buffer_by_id.sql, and (3) 16/select_buffer_by_id.sql in core/SQL/PostgreSQL/.
- CVSS 2.0
- 4.0 MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N
- EPSS
- 2.06% probability · 80th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- quassel-irc/quassel irc
- Source
- secalert@redhat.com
References
- http://lists.opensuse.org/opensuse-updates/2013-12/msg00092.html
- http://lists.opensuse.org/opensuse-updates/2014-01/msg00078.html
- http://osvdb.org/100432
- http://quassel-irc.org/node/123Patch, Vendor Advisory
- http://secunia.com/advisories/55640Vendor Advisory
- http://www.openwall.com/lists/oss-security/2013/11/28/8
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89377
- https://github.com/quassel/quassel/commit/a1a24daExploit, Patch
- http://lists.opensuse.org/opensuse-updates/2013-12/msg00092.html
- http://lists.opensuse.org/opensuse-updates/2014-01/msg00078.html
- http://osvdb.org/100432
- http://quassel-irc.org/node/123Patch, Vendor Advisory
- http://secunia.com/advisories/55640Vendor Advisory
- http://www.openwall.com/lists/oss-security/2013/11/28/8
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89377
- https://github.com/quassel/quassel/commit/a1a24daExploit, Patch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.