CVE-2016-7145

Critical

Published: 07/03/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The m_authenticate function in nefarious2 allows remote attackers to spoof certificate fingerprints, enabling them to log in as another user via a crafted AUTHENTICATE parameter.

Risk Assessment

Attackers can gain access to other users' accounts, leading to potential security breaches and data loss.

Recommendation

It is recommended to update the software to the latest version to eliminate this vulnerability and implement additional authentication mechanisms.

Original NVD description (English source)

The m_authenticate function in ircd/m_authenticate.c in nefarious2 allows remote attackers to spoof certificate fingerprints and consequently log in as another user via a crafted AUTHENTICATE parameter.