CVE-2014-9773
HighSummary
Atheme before version 7.2.7 has a vulnerability that allows remote attackers to modify Anope FLAGS behavior by registering and dropping nicknames using the (1) LIST, (2) CLEAR, or (3) MODIFY keywords.
Risk Assessment
An attackers can exploit this vulnerability to manipulate permissions in the system, potentially leading to unauthorized access or disruption of services.
Recommendation
It is recommended to upgrade Atheme to version 7.2.7 or later to mitigate this vulnerability.
Other vulnerabilities in Atheme
See all- CVE-2017-6384High
A memory leak in the login_user function in saslserv/main.c in Atheme 7.2.7 allows a remote unauthenticated attacker to consume memory and cause a denial of service. This issue is fixed in version 7.2.8.
- CVE-2016-4478High
Buffer overflow in the xmlrpc_char_encode function in Atheme before version 7.2.7 allows remote attackers to cause a denial of service via vectors related to XMLRPC response encoding.
Original NVD description (English source)
modules/chanserv/flags.c in Atheme before 7.2.7 allows remote attackers to modify the Anope FLAGS behavior by registering and dropping the (1) LIST, (2) CLEAR, or (3) MODIFY keyword nicks.